galaxy001

如何使用python3逃逸沙箱，获得进程上下文权限提升

最近突发奇想，想对所掌握的python知识进行总结一下，目前其实还停留在python层面如何使用，还没有深入到虚拟机部分，如果下面有哪些错误，欢迎指出。

背景

OJ(Online judge, 在线编程测评提交代码到后台运行检查)网站一般都允许各种各样的代码提交，其中很有可能包含python3，于是决定尝试通过python3的代码执行，进行沙箱逃逸，以及绕过各种限制。

我随便找了一个OJ网站，这个站点的python3有如下限制

Links

Install ss-server: https://github.com/shadowsocks/shadowsocks-libev

Download v2ray-plugin: https://github.com/shadowsocks/v2ray-plugin/releases

Download v2ray: https://github.com/v2ray/v2ray-core/releases

Server side

> ss-server -c server_config.json --plugin v2ray-plugin_linux_amd64 --plugin-opts "server;mode=websocket;path=/;loglevel=info"

We did it! We broke gist.github.com ;) So head over to the new home! Thank you all!
2021.10.20: https://github.com/AveYo/MediaCreationTool.bat now open for interaction

Not just an Universal MediaCreationTool wrapper script with ingenious support for business editions,

A powerful yet simple windows 10 / 11 deployment automation tool as well!

discuss on MDL

In case there's already a DHCP config for netplan for the private IP address:

File: /etc/netplan/50-cloud-init.yaml

Contents:

# This file is generated from information provided by
# the datasource.  Changes to it will not persist across an instance.
# To disable cloud-init's network configuration capabilities, write a file
# /etc/cloud/cloud.cfg.d/99-disable-network-config.cfg with the following:

Google Public NTP [AS15169]:

time.google.com

time1.google.com

time2.google.com

time3.google.com

Reddit post (Archived)

Table of Content

What to expect?
- Some TLDR about the idea behind
Prerequisites
- Hardware
- System & Software
Update: Attention for MUXless laptop

https://github.com/aancel/admin/wiki/VirtualGL-on-Ubuntu

https://virtualgl.org/About/Introduction

https://www.turbovnc.org

VirtualGL

When you use ssh with X forwarding, you might have noticed that you cannot execute programs that require 3D acceleration. That's where VirtualGL comes into play.

GSOC 2017 | Virgl Windows Driver

Project links

The project is split into several parts:

The kernel driver, with simple 3D command forwarding and 3D resource allocation
The userland driver, in fact the OpenGL backend
The reference, explaining virtio-gpu commands

https://github.com/Keenuts/virtio-gpu-win-icd \

`@nishuodedui` 使用帮助

tl;dr

锁推用户DM消息 fo 可被bot关注
不需要关注bot,直接at即可

详细帮助

不需要关注本帐号,但锁推用户需要给bot查看推文的权限.

	/**
	* 贪灵Gollum for Baiduyun, Ver.3.4.5
	* 立即执行函数：百度云盘批量转存用户分享。
	*
	* 【特点】
	* - 可保持或无视原分享者的目录结构。
	* - 支持差分转存。
	* - 自动分解转存，可突破单次转存总文件数5000的限制。
	* - 可在分享主页下，进入某文件夹来转存其下级子文件夹。
	* - 支持专辑转存。