Skip to content
Python pitfalls: Turning developer mistakes into vulnerabilities
yeswehack.com | blog | #rce | #vulnerability-research | #path-traversal | #python | #urljoin | #class-pollution
Summary
Abusing subtle Python behaviors — os.path.join truncation, urljoin quirks, class pollution — to turn developer assumptions into path traversal and, sometimes, RCE, with payload-construction guidance.
- Published
- Collected