Python-Eval on crAIzy.dev https://craizy.dev/tags/python-eval/ Recent content in Python-Eval on crAIzy.dev https://craizy.dev/img/htb-default.png crAIzy.dev https://craizy.dev/ Hugo en Fri, 01 May 2026 15:29:00 +0200 HTB Retired — Interpreter https://craizy.dev/writeups/interpreter/ Fri, 01 May 2026 15:29:00 +0200 crAIzy https://craizy.dev/writeups/interpreter/ Walkthrough of Interpreter — bypassing XStream deserialization hardening in Mirth Connect 4.4.0, then escaping a character-filtered double-eval Python f-string running as root.