mirror of
https://github.com/carlospolop/hacktricks
synced 2024-11-30 00:20:59 +00:00
18 lines
412 B
Markdown
18 lines
412 B
Markdown
# Python
|
|
|
|
## Server using python
|
|
|
|
test a possible **code execution**, using the function _str\(\)_:
|
|
|
|
```python
|
|
"+str(True)+" #If the string True is printed, then it is vulnerable
|
|
```
|
|
|
|
### Tricks
|
|
|
|
{% page-ref page="../../misc/basic-python/bypass-python-sandboxes.md" %}
|
|
|
|
{% page-ref page="../../pentesting-web/ssti-server-side-template-injection/" %}
|
|
|
|
{% page-ref page="../../pentesting-web/deserialization/" %}
|
|
|