webhard

Ещё один калькулятор (Another Calculator)

hackerlab

Task: Web calculator with eval() on user input and keyword blacklist. Solution: Python sandbox escape via MRO chain to access subprocess.Popen for RCE.

$ ls tags/ techniques/
rcesandbox_escapepythoneval_injectionblacklist_bypass
python_class_introspectionsubprocess_popenmro_chainsandbox_escape
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]