#!/usr/bin/env python3

import subprocess
import pipes

evil_input = '&& cat /etc/passwd'
#evil_input = '\'&& cat /etc/passwd'
#evil_input = pipes.quote(evil_input)
command = 'ls -l {}'.format(evil_input)
print(command)
subprocess.Popen(command.split(), shell=False)

7f54719fa7a8f72c5baa08f88b65a5895ebd0562
<mask token>

<mask token>
print(command)
subprocess.Popen(command.split(), shell=False)

<mask token>
evil_input = '&& cat /etc/passwd'
command = 'ls -l {}'.format(evil_input)
print(command)
subprocess.Popen(command.split(), shell=False)

import subprocess
import pipes
evil_input = '&& cat /etc/passwd'
command = 'ls -l {}'.format(evil_input)
print(command)
subprocess.Popen(command.split(), shell=False)

#!/usr/bin/env python3

import subprocess
import pipes

evil_input = '&& cat /etc/passwd'
#evil_input = '\'&& cat /etc/passwd'
#evil_input = pipes.quote(evil_input)
command = 'ls -l {}'.format(evil_input)
print(command)
subprocess.Popen(command.split(), shell=False)
