Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The fact that () and . are there miiiight enable a pyjail escape.

See also https://github.com/jailctf/pyjailbreaker

See also https://blog.pepsipu.com/posts/albatross-redpwnctf



That's a neat trick!

It does still require letters to be able to spell attribute/function names (unless I'm reading it wrong in that blog post).




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: