参考链接
========================================

反序列化
----------------------------------------
- `Python pickle反序列化 <http://www.91ri.org/9576.html>`_
- `Python 沙箱 官方wiki <https://wiki.python.org/moin/SandboxedPython>`_
- `Python eval的常见错误封装及利用原理 <http://xxlegend.com/2015/07/31/Python%20eval的常见错误封装及利用原理/>`_
- `pickle Python 对象序列化 <https://docs.python.org/zh-cn/3/library/pickle.html>`_
- `Sour Pickles A serialised exploitation guide in one part <https://media.blackhat.com/bh-us-11/Slaviero/BH_US_11_Slaviero_Sour_Pickles_Slides.pdf>`_
- `How pickle works in Python <https://rushter.com/blog/pickle-serialization-internals/>`_

沙箱
----------------------------------------
- `Python 沙箱通用绕过 <https://www.anquanke.com/post/id/86366>`_
- `一文看懂Python沙箱逃逸 <https://www.freebuf.com/articles/system/203208.html>`_

格式化字符串
----------------------------------------
- `Python字符串格式化漏洞 <https://www.leavesongs.com/PENETRATION/python-string-format-vulnerability.html>`_
- `Be Careful with Python's New-Style String Format <http://lucumr.pocoo.org/2016/12/29/careful-with-str-format/>`_

综合
----------------------------------------
- `python security <https://github.com/vstinner/python-security.git>`_
- `Python安全和代码审计相关资料收集 <https://github.com/bit4woo/python_sec>`_