Advanced Pickle Exploitation Against LLM’s with Python!
You might have seen pickle exploitation in a few dozen CTFs before, but there’s more to it than meets the eye. Sure, the basic code execution vulnerability has been super effective in exploiting websites and even recent LLMs, but the simple code execution vulnerability can be mitigated. If you know Python, you still have plenty of options. So, let’s break it down and explore this further.
Play along here: http://serialization.crabdance.com:6730/
Follow Mark's socials here:
https://x.com/MarkBaggett
/ @markbaggett