| 139 | import pickle |
| 140 | |
| 141 | class PicklePrint: |
| 142 | def __reduce_ex__(self, p): |
| 143 | return str, ("Pwned!",) |
| 144 | |
| 145 | payload_1 = pickle.dumps(PicklePrint()) |
| 146 | payload_2 = pickle.dumps(("a", "b", "c", 1, 2, 3)) |
no outgoing calls
searching dependent graphs…