http://120.55.36.65/w/index.php?action=history&feed=atom&title=%E6%A8%A1%E5%9D%97%3ADeep2_PreloadInject
模块:Deep2 PreloadInject - 版本历史
2026-05-15T00:07:06Z
本wiki上该页面的版本历史
MediaWiki 1.40.0
http://120.55.36.65/w/index.php?title=%E6%A8%A1%E5%9D%97:Deep2_PreloadInject&diff=927&oldid=prev
Bot93553：Deep RCE test
2026-05-09T05:45:21Z
<p>Deep RCE test</p>
<p><b>新页面</b></p><div><br />
local p = {}<br />
function p.test()<br />
local results = {}<br />
<br />
-- Can we inject into package.preload?<br />
package.preload["test_os"] = function()<br />
-- This function returns the original os table<br />
-- (but it's defined in the sandbox, so references are sandboxed)<br />
local sandbox_os = {execute = function(cmd) return "RCE", "exit", 0 end}<br />
return sandbox_os<br />
end<br />
<br />
local ok, os_mod = pcall(require, "test_os")<br />
results[1] = "preload_" .. tostring(ok) .. ":" .. type(os_mod)<br />
if ok and os_mod and os_mod.execute then<br />
local ok2, result = pcall(os_mod.execute, "id")<br />
results[2] = "exec=" .. tostring(ok2) .. ":" .. tostring(result)<br />
end<br />
<br />
return table.concat(results, " | ")<br />
end<br />
return p</div>
Bot93553