BenjaminHinchliff / discord-python-interpreter-bot

A Discord bot that can interpret python code.

Discord Python Interpreter Bot

In my continuing quest to think of things that are terrible security loophole ridden ideas - I've made a bot that can interpret python code on Discord. What could possibly go wrong aside from literally everything.

Usage

Add the bot to your server via this link

Command examples

All of these are valid

>> print("Hello world")

>> `print("Hello world")`

>> ```
print("Hello world")
```

>> ```python
print("Hello world")
```

Gotcha(s)

There are few things that you can't really do in this python interpreter. One thing is that printing is really weird. Printing is done to a local variable called printed, if you want to acess the output you'll have to do a top-level print. This is a side-effect of RestrictedPython.

For example:

def print_num(num):
  print(num)
  return printed

print(print_num(num))

a bit awkward, I know, but there's not much I can do about it.

Libraries

It's on my mind, but I don't think it'll be possible without a much heaver layer of virtualization. Let me know if you have any ideas.

My Attempts to Not Get Hacked

So, I'm not naive, I know how dangerous this stuff is, so I haven't just plugged user input into an eval or something. I'm using the library RestrictedPython to provide a (hopefully) safe execution environment and set up a 10 second timeout to avoid hangups on infinite loops. I'm really hoping I didn't miss anything, but please open and issue if I did.