Python

{{#include ../../banners/hacktricks-training.md}}

Server using python

test a possible code execution, using the function str():

"+str(True)+" #If the string True is printed, then it is vulnerable

Tricks

{{#ref}}
../../generic-methodologies-and-resources/python/bypass-python-sandboxes/README.md
{{#endref}}

{{#ref}}
../../pentesting-web/ssti-server-side-template-injection/README.md
{{#endref}}

{{#ref}}
../../pentesting-web/deserialization/README.md
{{#endref}}

{{#include ../../banners/hacktricks-training.md}}