O se vaega o tagata suʻesuʻe mai le Iunivesite o Turku (Finland) na faʻasalalau taunuʻuga o se auʻiliʻiliga o afifi i totonu o le PyPI repository mo le faʻaogaina o mea e ono lamatia ai e mafai ona oʻo atu ai i faʻafitauli. I le taimi o suʻesuʻega o le 197 afe afifi, 749 afe faʻafitauli saogalemu na faʻaalia. 46% o afifi o loʻo i ai se tasi o faʻafitauli faʻapea. Faatasi ai ma faʻafitauli sili ona taatele o faʻaletonu e fesoʻotaʻi ma le faʻaogaina o faʻalavelave ma le faʻaogaina o foliga e mafai ai ona sui code.
Mai le 749 afe faʻafitauli na faʻaalia, 442 afe (41%) na faʻailogaina e laʻititi, 227 afe (30%) o faʻafitauli faʻaletonu ma 80 afe (11%) o se mea matautia. O nisi afifi e tu ese mai le motu o tagata ma aofia ai le faitau afe o faʻafitauli: mo se faʻataʻitaʻiga, o le PyGGI package na faʻaalia 2589 faʻafitauli, e masani lava ona fesoʻotaʻi ma le faʻaogaina o le "try-except-pass" construct, ma le appengine-sdk package na maua 2356 faafitauli. Ole tele o fa'afitauli o lo'o iai fo'i ile pusa genie.libs.ops, pbcore ma genie.libs.parser.
E tatau ona maitauina o taunuʻuga na maua e faʻavae i luga o suʻesuʻega faʻapitoa faʻapitoa, lea e le amanaʻia ai le tulaga o le faʻaogaina o nisi fausaga. O le tagata na faia le meafaigaluega faomea, lea na faʻaaogaina e suʻesuʻe ai le code, na faʻaalia le manatu ona o le maualuga o le numera o faʻamatalaga sese, e le mafai ona manatu saʻo iʻuga o faʻafitauli e aunoa ma se toe iloiloga faʻaopoopo o tusi taʻitasi.
Mo se faʻataʻitaʻiga, e manatu le tagata suʻesuʻe o le faʻaogaina o numera faʻafuaseʻi e le mafai ona faʻatuatuaina ma le hashing algorithms, e pei o le MD5, o se faʻafitauli saogalemu, ae i totonu o le code e mafai ona faʻaogaina ia algorithms mo faʻamoemoega e le afaina ai le saogalemu. E manatu foi le tagata suʻesuʻe soʻo se gaioiga o faʻamatalaga i fafo i galuega le saogalemu e pei o le piko, yaml.load, subprocess ma eval se faʻafitauli, ae o lenei faʻaoga e le aofia ai se faʻafitauli ma o le mea moni o le faʻaogaina o nei galuega e mafai ona faʻatinoina e aunoa ma se faʻamataʻu saogalemu. .
Faatasi ai ma suʻega na faʻaaogaina i le suʻesuʻega:
- Fa'aaogaina galuega e ono le saogalemu exec, mktemp, eval, mark_safe, ma isi.
- Le fa'atulagaina o aia tatau mo faila.
- Fa'apipi'i soketi feso'ota'iga i feso'ota'iga uma.
- Fa'aoga o upu fa'amalo ma ki o lo'o fa'amaoti lelei ile fa'ailoga.
- Fa'aaogā se fa'atonuga lē tumau.
- Fa'aaogaina o le pasi ma fa'aauau i le pu'e-uma-style tuusaunoaga pule;
- Fa'alauiloaina o talosaga i luga o le upega tafa'ilagi e fa'avae i luga o le fa'ava'a i luga ole laiga Flask ma fa'aogaina le fa'aogaina.
- Fa'aaogāina o fa'amatalaga e le saogalemu auala fa'a'eserialization.
- Fa'aaoga galuega MD2, MD4, MD5 ma SHA1 hash.
- Fa'aaogāina ole fa'ailoga DES ma fa'ailoga fa'ailoga.
- Fa'aaogāina ole fa'atinoina ole HTTPSConnection i nisi fa'aliliuga ole Python.
- Fa'ailoa le faila: // polokalame ile urlopen.
- Fa'aaogāina fa'atupu numera pseudorandom pe a fa'atino galuega fa'ata'oto.
- Faʻaaogaina le Telnet protocol.
- Fa'aaogā fa'aliga XML e le saogalemu.
E le gata i lea, e mafai ona maitauina e 8 pusa leaga na maua i le PyPI directory. Aʻo leʻi aveeseina, o faʻafitauli faʻafitauli na sii mai i luga o le 30 afe taimi. Ina ia natia gaioiga leaga ma faʻafefe lapataiga mai suʻesuʻega faʻataʻitaʻi faigofie i afifi, faʻapipiʻi poloka poloka e faʻaaoga ai le Base64 ma faʻataunuʻuina pe a maeʻa le faʻaogaina e faʻaaoga ai se valaau eval.
O le noblesse, genesisbot, o loʻo, mafatia, noblesse2 ma noblessev2 afifi o loʻo i ai le faʻailoga mo le faʻalavelaveina o numera kata aitalafu ma upu faʻaulu o loʻo teuina i Chrome ma Edge browsers, faʻapea foʻi ma le fesiitaiga o faʻailoga tala mai le talosaga a le Discord ma le lafoina o faʻamatalaga o le faiga, e aofia ai faʻamalama o mea mataʻutia. . O pusa pytagora ma pytagora2 e aofia ai le mafai ona utaina ma faʻatino le tulafono faʻatinoina lona tolu.
puna: opennet.ru