Den1al Den1al

## pickle-payload.py
#!/usr/bin/python
#
# Pickle deserialization RCE payload.
# To be invoked with command to execute at it's first parameter.
# Otherwise, the default one will be used.
#

import cPickle
import sys
import base64

## all.txt

@
*
0
00
0-0
000
0000
00000
000000

## mysql-pandas-import.py
import pandas as pd
import pymysql
from sqlalchemy import create_engine

engine = create_engine('mysql+pymysql://<user>:<password>@<host>:<port>/<dbname>')

df = pd.read_sql_query('SELECT * FROM table', engine)
df.head()
	#!/usr/bin/python
	#
	# Pickle deserialization RCE payload.
	# To be invoked with command to execute at it's first parameter.
	# Otherwise, the default one will be used.
	#

	import cPickle
	import sys
	import base64
	import pandas as pd
	import pymysql
	from sqlalchemy import create_engine

	engine = create_engine('mysql+pymysql://<user>:<password>@<host>:<port>/<dbname>')

	df = pd.read_sql_query('SELECT * FROM table', engine)
	df.head()