Python

Reading time: 1 minute

tip

Jifunze na fanya mazoezi ya AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE)
Jifunze na fanya mazoezi ya GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)

Support HackTricks

Server using python

jaribu kutekeleza msimbo unaowezekana, ukitumia kazi str():

python
"+str(True)+" #If the string True is printed, then it is vulnerable

Njia

{{#ref}} ../../generic-methodologies-and-resources/python/bypass-python-sandboxes/ {{#endref}}

{{#ref}} ../../pentesting-web/ssti-server-side-template-injection/ {{#endref}}

{{#ref}} ../../pentesting-web/deserialization/ {{#endref}}

tip

Jifunze na fanya mazoezi ya AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE)
Jifunze na fanya mazoezi ya GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)

Support HackTricks