eval注入 a= "__import__('os').system('dir')" b=eval(a) print b print open('hello.py').read() 转载于:https://my.oschina.net/FatWhite/blog/725091