akillcool akillcool

## 如何使用python3逃逸沙箱，获得进程上下文权限提升.md

      
              1 file
            
          
              5 forks
            
          
              2 comments
            
          
              36 stars
            
          
                adolli
                / 如何使用python3逃逸沙箱，获得进程上下文权限提升.md
            
            
              Last active
              April 30, 2024 13:07
            
              
                如何使用python3逃逸沙箱，获得进程上下文权限提升
              
          
    如何使用python3逃逸沙箱，获得进程上下文权限提升

最近突发奇想，想对所掌握的python知识进行总结一下，目前其实还停留在python层面如何使用，还没有深入到虚拟机部分，如果下面有哪些错误，欢迎指出。
背景

OJ(Online judge, 在线编程测评提交代码到后台运行检查)网站一般都允许各种各样的代码提交，其中很有可能包含python3，于是决定尝试通过python3的代码执行，进行沙箱逃逸，以及绕过各种限制。
我随便找了一个OJ网站，这个站点的python3有如下限制

  
## gosu-entrypoint.sh
#!/bin/bash
# Run commands in the Docker container with a particular UID and GID.
# The idea is to run the container like
#   docker run -i \
#     -v `pwd`:/work \
#     -e LOCAL_USER_ID=`id -u $USER` \
#     -e LOCAL_GROUP_ID=`id -g $USER` \
#     image-name bash
# where the -e flags pass the env vars to the container, which are read by this script.
# By setting copying this script to the container and setting it to the

## kerberos_setup.md

      
              2 files
            
          
              49 forks
            
          
              22 comments
            
          
              100 stars
            
          
                ashrithr
                / kerberos_setup.md
            
            
              Last active
              March 19, 2024 16:20
            
              
                Set up kerberos on Redhat/CentOS 7
              
          
    Installing Kerberos on Redhat 7

This installation is going to require 2 servers one acts as kerberos KDC server
and the other machine is going to be client. Lets assume the FQDN's are (here
cw.com is the domain name, make a note of the domain name here):

Kerberos KDC Server: kdc.cw.com
Kerberos Client: kclient.cw.com


Important: Make sure that both systems have their hostnames properly set and
both systems have the hostnames and IP addresses of both systems in


## install_monaco_font.sh
#!/bin/bash
# Install Monaco font in Linux
# Version from nullvideo https://gist.github.com/rogerleite/99819#gistcomment-2799386

sudo mkdir -p /usr/share/fonts/truetype/ttf-monaco && \
sudo wget https://gist.github.com/rogerleite/b50866eb7f7b5950da01ae8927c5bd61/raw/862b6c9437f534d5899e4e68d60f9bf22f356312/mfont.ttf -O - > \
/usr/share/fonts/truetype/ttf-monaco/Monaco_Linux.ttf && \
sudo fc-cache
	#!/bin/bash
	# Run commands in the Docker container with a particular UID and GID.
	# The idea is to run the container like
	# docker run -i \
	# -v `pwd`:/work \
	# -e LOCAL_USER_ID=`id -u $USER` \
	# -e LOCAL_GROUP_ID=`id -g $USER` \
	# image-name bash
	# where the -e flags pass the env vars to the container, which are read by this script.
	# By setting copying this script to the container and setting it to the
	#!/bin/bash
	# Install Monaco font in Linux
	# Version from nullvideo https://gist.github.com/rogerleite/99819#gistcomment-2799386

	sudo mkdir -p /usr/share/fonts/truetype/ttf-monaco && \
	sudo wget https://gist.github.com/rogerleite/b50866eb7f7b5950da01ae8927c5bd61/raw/862b6c9437f534d5899e4e68d60f9bf22f356312/mfont.ttf -O - > \
	/usr/share/fonts/truetype/ttf-monaco/Monaco_Linux.ttf && \
	sudo fc-cache