search

rmmh / skybot

Python IRC bot
https://github.com/rmmh/skybot/wiki
The Unlicense
250 stars 171 forks source link

`.python` is vulnerable #122

Closed milesrout closed 10 years ago

milesrout commented 10 years ago

You can do this

.python __import__('sys').setrecursionlimit(1)

which results in a semi-permanent disable of scybot's python environment.

This is somewhat useful when people start botspamming with .python, but should still be fixed.

Red-M commented 10 years ago

I tested it with my bot and have only received a 3 second disable. Then again i use a modified version of skybot.

rmmh commented 10 years ago

attempting to sandbox it is pretty pointless, it's just some GAE app