bugkupypin1

#!/usr/bin/env python3
blacklist = ["/","0","1","2","3","4","5","6","7","8","9","setattr","compile","globals","os","import","_","breakpoint","exit","lambda","eval","exec","read","print","open","'","=",'"',"x","builtins","clear"]
print("="*25)
print(open(__file__).read())
print("="*25)
print("Welcome to the jail!")
print("="*25)

for i in range(2):
x = input('Enter command: ')
for c in blacklist:
if c in x:
print("Blacklisted word found! Exiting!")
exit(0)
exec(x)

黑名单这里基本都过滤了但blacklist没有过滤，而且可以发现其可以进行两次执行命令的机会，所以可以基本确定从这里入手。

使用del blacklist[:]删除里面的内容

print(open("flag.txt").read())