Python

Exploiting Imports

It is possible to create a .py file named with the name of the import. This will load the local file (same dir as the file importing the library) instead of the actual library.

cPickle RCE

• Arbitrary code execution with Python pickles
• Python Pickle Injection
• https://penturalabs.wordpress.com/2011/03/17/python-cpickle-allows-for-arbitrary-code-execution/
• https://blog.nelhage.com/2011/03/exploiting-pickle/
• https://stackoverflow.com/questions/38307636/can-anyone-explain-me-the-example-of-an-exploit-in-python-s-pickle-module
• HTB - DevOps