[TOC]
来源：ctfshow
easyPytHon_P
考点：代码审计，源代码查看
打开后查看源码，发现一个源码地址，打开看看
可以知道在此目录下有个flag.txt文件，再观察源码
123456789101112131415from flask import requestcmd: str = request.form.get('cmd')param: str = request.form.get('param')# ------------------------------------- Don't modify ↑ them ↑! But you can write your code ↓import subprocess, osif cmd is not None and param is not None: try: tVar = subprocess.run([cmd[:3], param, __file__], cwd=os.getcwd(), timeout=5) p ...
