hacktricks/network-services-pentesting/pentesting-web/python.md
2023-08-03 19:12:22 +00:00

3.7 KiB
Raw Blame History

Python

☁️ HackTricks 云 ☁️ -🐦 推特 🐦 - 🎙️ Twitch 🎙️ - 🎥 YouTube 🎥

使用 Python 构建服务器

测试可能的代码执行,使用函数 str()

"+str(True)+" #If the string True is printed, then it is vulnerable

技巧

{% content-ref url="../../generic-methodologies-and-resources/python/bypass-python-sandboxes/" %} bypass-python-sandboxes {% endcontent-ref %}

{% content-ref url="../../pentesting-web/ssti-server-side-template-injection/" %} ssti-server-side-template-injection {% endcontent-ref %}

{% content-ref url="../../pentesting-web/deserialization/" %} deserialization {% endcontent-ref %}

☁️ HackTricks 云 ☁️ -🐦 Twitter 🐦 - 🎙️ Twitch 🎙️ - 🎥 Youtube 🎥