python原型链污染原理分析

llll00lllll

于 2024-04-10 09:10:40 发布

阅读量469

点赞数 9

分类专栏： CTF知识文章标签： python 前端服务器

本文链接：https://blog.youkuaiyun.com/2301_79724395/article/details/137581091

版权

python原型链污染原理分析

2024-03-18 分类：阅读(23) 评论(1)

class father:
    secret = "hello"
class son_a(father):
    pass
class son_b(father):
    pass
def merge(src, dst):
    for k, v in src.items():
        if hasattr(dst, '__getitem__'):
            if dst.get(k) and type(v) == dict:
                merge(v, dst.get(k))
            else:
                dst[k] = v
        elif hasattr(dst, k) and type(v) == dict:
            merge(v, getattr(dst, k))
        else:
            setattr(dst, k, v)
instance = son_b()
payload = {
    "__class__" : {
        "__base__" : {
            "secret" : "world"
        }
    }
}
print(son_a.secret)
#hello
print(instance.secret)
#hello
merge(payload, instance)
print(son_a.secret)
#world
print(instance.secret)
#world

我们在merge下断点