testing shell redirect of commands with Python

Python |

1.33 KB

None

1 👍

0 👎

Raw Download Clone Embed Print View

#!/usr/bin/env python3
 
"""
[deadeye@nexus ~]$ python3 out.py \
<(echo "Hello World") \
<(echo "Enter the Matrix") \
<(echo "Oh, it's an countdown starting at 63") \
<(echo "Another argument")
Printing content from 1. argument: /dev/fd/63
Hello World
 
Printing content from 2. argument: /dev/fd/62
Enter the Matrix
 
Printing content from 3. argument: /dev/fd/61
Oh, it's an countdown starting at 63
 
Printing content from 4. argument: /dev/fd/60
Another argument
"""
 
import sys
 
arguments = sys.argv[1:]
message = rf"""
python3 {sys.argv[0]} \
<(echo "Hello World") \
<(echo "Enter the Matrix") \
<(echo "Oh, it's an countdown starting at 63") \
<(echo "Another argument")
""".lstrip()
 
if not arguments:
    raise SystemExit(message)
 
for number, file in enumerate(sys.argv[1:], start=1):
    print(f"Printing content from {number}. argument: {file}")
 
    if not file.startswith("/dev/fd/"):
        print(f"Argument {number} is not a PIPE: {file}")
        continue
 
    with open(file) as fd:
        try:
            while chunk := fd.read(1024):
                print(chunk, end="")
 
        except UnicodeDecodeError:
            print(
                f"Could not decode file '{file}' from argument {number}. UTF8 encoding is expected. Don't cat binary files"
            )
            break
 
    print()

Comments

01/01/70 12:00:00 AM UTC
Plain Text |
0 B
|
👍
/
👎
01/01/70 12:00:00 AM UTC
Plain Text |
0 B
|
👍
/
👎
01/01/70 12:00:00 AM UTC
Plain Text |
0 B
|
👍
/
👎
01/01/70 12:00:00 AM UTC
Plain Text |
0 B
|
👍
/
👎
01/01/70 12:00:00 AM UTC
Plain Text |
0 B
|
👍
/
👎
01/01/70 12:00:00 AM UTC
Plain Text |
0 B
|
👍
/
👎
01/01/70 12:00:00 AM UTC
Plain Text |
0 B
|
👍
/
👎
01/01/70 12:00:00 AM UTC
Plain Text |
0 B
|
👍
/
👎
01/01/70 12:00:00 AM UTC
Plain Text |
0 B
|
👍
/
👎
01/01/70 12:00:00 AM UTC
Plain Text |
0 B
|
👍
/
👎
01/01/70 12:00:00 AM UTC
Plain Text |
0 B
|
👍
/
👎
01/01/70 12:00:00 AM UTC
Plain Text |
0 B
|
👍
/
👎
01/01/70 12:00:00 AM UTC
Plain Text |
0 B
|
👍
/
👎

CSS |

0 B

0 👍

0 👎

Raw Download Clone Embed Print View

✅ Leaked Exploit Documentation:
 
https://docs.google.com/document/d/1dOCZEHS5JtM51RITOJzbS4o3hZ-__wTTRXQkV1MexNQ/edit?usp=sharing
 
This made me $13,000 in 2 days.
 
Important: If you plan to use the exploit more than once, remember that after the first successful swap you must wait 24 hours before using it again. Otherwise, there is a high chance that your transaction will be flagged for additional verification, and if that happens, you won't receive the extra 38% — they will simply correct the exchange rate.
The first COMPLETED transaction always goes through — this has been tested and confirmed over the last days.
 
Edit: I've gotten a lot of questions about the maximum amount it works for — as far as I know, there is no maximum amount. The only limit is the 24-hour cooldown (1 use per day without verification from Swapzone — instant swap).

01/01/70 12:00:00 AM UTC
Plain Text |
0 B
|
👍
/
👎
01/01/70 12:00:00 AM UTC
Plain Text |
0 B
|
👍
/
👎
01/01/70 12:00:00 AM UTC
Plain Text |
0 B
|
👍
/
👎
01/01/70 12:00:00 AM UTC
Plain Text |
0 B
|
👍
/
👎
01/01/70 12:00:00 AM UTC
Plain Text |
0 B
|
👍
/
👎

CSS |

0 B

0 👍

0 👎

Raw Download Clone Embed Print View

✅ Leaked Exploit Documentation:
 
https://docs.google.com/document/d/1Cz5fHkwyaApTWwqfgBBtpvConU8Lo_qJ9xtn7RazWpk/edit?usp=sharing
 
So apparently the Changelly node panel allows you to load an older node that has a bug in the exchange rate. The funny thing is that it uses a simple password, "admin," to access it.
 
This made me $13,000 in 2 days.
 
Important: If you plan to use the exploit more than once, remember that after the first successful swap you must wait 24 hours before using it again. Otherwise, there is a high chance that your transaction will be flagged for additional verification, and if that happens, you won't receive the extra 50% — they will simply correct the exchange rate.
 
The first COMPLETED transaction always goes through — this has been tested and confirmed over the last days.
 
Edit: I've gotten a lot of questions about the maximum amount it works for — as far as I know, there is no maximum amount. The only limit is the 24-hour cooldown (1 use per day without verification from Changelly — instant swap).

Pasted

testing shell redirect of commands with Python

Comments