Skip to content

Some nasty code to inject pickles with (almost) arbitrary code

Notifications You must be signed in to change notification settings

mike0sv/nasty_pickle

Repository files navigation

nasty_pickle

Some nasty code to inject pickles with (almost) arbitrary code

Usage

from nasty_pickle import patch_pickle_bytes

def my_bomb():
    print('kek')
    
pickle_payload = ...
payload_that_will_print_kek_on_unpickling = patch_pickle_bytes(pickle_payload, my_bomb)

my_bomb can contain any code that is convertible to oneliner, so no ifs, loops, exception handling and so on. And don't forget to include necessary imports

About

Some nasty code to inject pickles with (almost) arbitrary code

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages