# Python

## Server using python

test a possible **code execution**, using the function *str()*:

```python
"+str(True)+" #If the string True is printed, then it is vulnerable
```

You [can find here **several tricks**](https://chinnidiwakar.gitbook.io/githubimport/misc/basic-python/bypass-python-sandboxes) to obtain **code executing** in python if you can execute arbitrary code.

### \*\*\*\*[**Python Deserialization**](https://chinnidiwakar.gitbook.io/githubimport/pentesting-web/deserialization#python)\*\*\*\*