Python Cheat SheetsFinding sinks from modules

Finding sinks from modules

__import__("ctypes")._sys -> <module 'sys' (built-in)>

__import__("ctypes")._os  -> <module 'os' from '/usr/lib/python3.10/os.py'>

How to find sinks from modules

You can also use the object_walker library to find sinks from modules

$ objectwalker -m jinja2 --filter-module os --max-depth 15

[FilterTypeIsModule] [module=os] [module_type=package] | jinja2.bccache.os

[FilterTypeIsModule] [module=os] [module_type=package] | jinja2.environment.os

[FilterTypeIsModule] [module=os] [module_type=package] | jinja2.loaders.os

[FilterTypeIsModule] [module=os] [module_type=package] | jinja2.utils.os

[FilterTypeIsModule] [module=os] [module_type=package] | jinja2.async_utils.inspect.os

[FilterTypeIsModule] [module=os] [module_type=package] | jinja2.bccache.fnmatch.os

[FilterTypeIsModule] [module=os] [module_type=package] | jinja2.bccache.tempfile._os

[FilterTypeIsModule] [module=os] [module_type=package] | jinja2.clear_caches.__globals__["os"]

[FilterTypeIsModule] [module=os] [module_type=package] | jinja2.filters.random._os

[FilterTypeIsModule] [module=os] [module_type=package] | jinja2.is_undefined.__globals__["os"]

[FilterTypeIsModule] [module=os] [module_type=package] | jinja2.loaders.posixpath.os

[FilterTypeIsModule] [module=os] [module_type=package] | jinja2.nodes.inspect.os

[FilterTypeIsModule] [module=os] [module_type=package] | jinja2.pass_context.__globals__["os"]

[FilterTypeIsModule] [module=os] [module_type=package] | jinja2.pass_environment.__globals__["os"]

[FilterTypeIsModule] [module=os] [module_type=package] | jinja2.pass_eval_context.__globals__["os"]

[FilterTypeIsModule] [module=os] [module_type=package] | jinja2.select_autoescape.__globals__["os"]

Environment Variables

Format string