gistfile0.txt

#!/usr/bin/env python3
import marshal
import sys

WATCHED = {"compile", "code.__new__"}


def audit_hook(event, args):
    if event in WATCHED:
        raise RuntimeError(f"blocked {event}")


# Simulate attacker-produced code bytes created before the hook/process boundary.
def payload():
    print("ATTACKER CODE RAN")


blob = marshal.dumps(payload.__code__)

sys.addaudithook(audit_hook)

code = marshal.loads(blob)  # Python 3.10+ emits marshal.loads, not code.__new__
exec(code)