Skip to main content

Can wrong code can lead to RCE?

Yes I am talking about Python input vulnerability which exists in only Python 2 version.
Even code written in python 3 and  executed in python2 can be exploited.

So I wrote test code in python3 and i executed in python 2 to check it




Above is the following code

Now it's execution


It's performing some action unlike raw_input which considers everything as string.

Now what if i type vulnerable code inside

 

And we can import any library also.


Comment below to make it a reverse shell.

Comments