All rooms Sign in
MiscLesson + challenge Live machineFree

Jail Break-in

A sandbox that runs your Python — as long as it can't tell what you're really doing.

A sandbox that runs your Python — as long as it can't tell what you're really doing.

Difficulty
Medium
Estimated time
35 min
Points
280 pts
Completions
Be the first to complete it
Authors
By Cyber Academy 4 U
Create a free account to startSign in

What you will learn

  • Recognising a restricted-`eval` Python jail and probing what is still reachable.
  • Recovering the real `__builtins__` from a live object via `().__class__.__base__.__subclasses__()`.
  • Pulling a module's globals out of a class method's `__globals__`.
  • Defeating a naive substring/keyword blacklist by reassembling forbidden names at runtime.
  • Turning introspection into an arbitrary file read of the flag.

What is inside

  1. Task 1 · Jail Break-in1 question

Sign in to read the tasks, start the machine and answer the questions.