YAML: code execution using !!python/object
A popular opinion says to not use the pickle class on a data given by user because on deserialization it may lead to the object injection attack and malicious code execution.
Subscribe: https://www.youtube.com/c/KacperSzure...
But what about other formats? Are they also dangerous?
My name is Kacper Szurek and in today's episode of "from 0 to pentesting hero" I'm going to talk about yaml files.
Yaml format is not as simple as it might seem.
In the standard parser used in Python, we can also use the apply tag, which allows you to call any function from any module, and pass appropriate parameters to them.
So it is equivalent to the ability to execute arbitrary code on the server that we attack.
In our case, we will use the os.system function to list the contents of the current directory.
Twitter: / kacperszurek
Website: https://security.szurek.pl/
Github: https://github.com/kacperszurek/
#from0topentestinghero #bugbounty #python
На этой странице сайта вы можете посмотреть видео онлайн YAML: code execution using !!python/object длительностью часов минут секунд в хорошем качестве, которое загрузил пользователь KacperSzurekEN 19 Февраль 2019, поделитесь ссылкой с друзьями и знакомыми, на youtube это видео уже посмотрели 14,172 раз и оно понравилось 143 зрителям. Приятного просмотра!
