(python -c 'print "payload"'; cat -) | nc pwnable.url
(echo payload; cat) | ./pwnable
cat payload - | ./pwnable
(python -c 'print "payload"'; cat -) | nc pwnable.url
(echo payload; cat) | ./pwnable
cat payload - | ./pwnable
| #!/usr/bin/python | |
| # | |
| # Pickle deserialization RCE payload. | |
| # To be invoked with command to execute at it's first parameter. | |
| # Otherwise, the default one will be used. | |
| # | |
| import cPickle | |
| import os | |
| import sys |
0x8545: Original 84 -> 850x08FF19: Original 75 -> EB0x1932C7: Original 75 -> 74 (remove UNREGISTERED in title bar, so no need to use a license)