MiraiForum

    • Register
    • Login
    • Search
    • Popular
    • Recent
    • Unsolved
    • Tags
    • Groups
    • 友情链接

    Python交互式命令行插件 (咕咕咕)

    插件发布
    6
    8
    2138
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • R
      RIvance last edited by RIvance

      Screenshot from 2021-08-24 00-34-29.png

      比较简单的小东西, 基于Jython2.7开发, 扩展性较强, 后期会加入matplotlib图片显示等功能

      项目地址: https://github.com/RIvance/MiraiPythonPlugin

      目前有如下命令:

      命令 用途
      !python, !py, !exec, #python python交互式命令行
      !calc, !print, !eval 打印表达式值
      !autoclear <on | off> 开启/关闭自动清空buffer
      !import 导包
      !addpacks <path> 引入第三方包路径
      !cond 打印上次执行的状态
      !clearbuffer 清空buffer

      目前安全方面可以预防绝大部分沙箱逃逸方法, 但也不保证绝对安全, 建议在docker内使用

      1 Reply Last reply Reply Quote 0
      • EdgeStar2020
        EdgeStar2020 last edited by

        大佬这是要面向QQ编程吗(

        1 Reply Last reply Reply Quote 4
        • RainChan
          RainChan 摸鱼 last edited by

          感觉还是有办法逃逸的,不用docker可能确实不太安全

          1 Reply Last reply Reply Quote 0
          • J
            JAstray last edited by JAstray

            qwq已经确定能注入命令了

            #python
            a = __import__("o"+"s")
            for i in a.listdir("./"):
                print(i)
            a.system("rm xxxxxxx")
            

            大家使用的时候一定要注意安全Orz

            1 Reply Last reply Reply Quote 2
            • Z
              zyckk4 摸鱼 last edited by zyckk4

              请问有没有办法在python运行时强行停止?

              R 1 Reply Last reply Reply Quote 0
              • M
                ManuscriptP last edited by

                什么时候做3.7的python(

                R 1 Reply Last reply Reply Quote 0
                • R
                  RIvance @ManuscriptP last edited by

                  @ManuscriptP 确实太久没更新了, 主要是测试用的 QQ 号被冻结了, 一直没有环境来做测试, 最近抽空修一下注入 bug

                  1 Reply Last reply Reply Quote 0
                  • R
                    RIvance @zyckk4 last edited by

                    @zyckk4 下次更新的时候会加一个可选的timeout, 超时自动kill

                    1 Reply Last reply Reply Quote 0
                    • 1 / 1
                    • First post
                      Last post
                    Powered by Mamoe Technologies & NodeBB | 友情链接 | 服务监控 | Contact