Challenge: Please break this! [Python Security]

Tim Wintle tim.wintle at teamrubber.com
Mon Feb 23 16:35:49 EST 2009


On Mon, 2009-02-23 at 20:50 +0000, tav wrote:
> I'm keen to know your experiences even if you don't manage to write to
> the filesystem -- and especially if you do!
> 

er sorry, but:

from safelite import FileReader
reload(__builtins__)
f = open("/home/tim/nano.save","w")
f.write("oops")
f.close()

> Dinner and drinks on me for an evening -- when you are next in London
> or I am in your town -- to the first person who manages to break
> safelite.py and write to the filesystem.

I'm in London on Wednesday ;-) Unfortunately I'm going to be too busy to
take up your offer, lol


Tim Wintle







More information about the Python-list mailing list