Bug: Remote get shell

[peiwithhao]

Describe the bug

By importing the os module and obtaining the container shell, the kernel version can be known, resulting in possible escape and privilege escalation.

To Reproduce

1. import os
2. os.system("/bin/bash")
3. neofetch
4. git clone ...
5. ./exploit

Expected behavior

maybe container escape or priviledge escalation

URL to the issue

https://www.python.org/shell/

Screenshots

"![SCREENSHOT_DESCRIPTION](SCREENSHOT_LINK.png)"

Browsers

Chrome, Other

Operating System

Linux

Browser Version

No response

Relevant log output

No response

Additional context

No response

[encukou]

This is intended behaviour. Python is a tool for arbitrary code execution.

[ewdurbin]

The interactive shell on the site is powered by https://www.pythonanywhere.com

If you find a security issue with that shell, please report it to them via their bug bounty program