The URL of the vulnerable upload endpoint.

Example:

The exploit uploads both the malicious PDF and the compressed pickle to this endpoint.

UPLOAD_DIR

The absolute directory on the target where uploaded files are stored.

Example:

This path is embedded inside the generated PDF and must match the location from which the vulnerable application will later read the uploaded pickle.

If the upload directory is unknown, determine it during enumeration. Depending on the application, useful techniques include:

• Reviewing application source code (if available)
• Inspecting error messages or stack traces
• Looking for configuration files
• Identifying where uploaded files are served from
• Enumerating predictable upload locations
• Fuzzing likely upload paths when appropriate

Typical locations include:

The correct directory depends entirely on the target application.

LHOST

Your listener IP address.

Example:

LPORT

Listening port for the reverse shell.

Example:

Start a listener before running the exploit:

Usage

Execute the exploit:

The script will:

1. Generate a malicious pickle.
2. Compress it into evil.pickle.gz.
3. Generate a malicious PDF referencing that pickle.
4. Upload both files.
5. Trigger PDF processing.
6. Execute the payload if the target is vulnerable.

Custom Payloads

Instead of a reverse shell, any operating system command can be executed by modifying the command passed to:

Examples include:

Notes

• The vulnerable application must process the uploaded PDF using a vulnerable version of pdfminer.six.
• The uploaded pickle must remain accessible at the path referenced in the crafted PDF.
• Successful exploitation depends on the target's processing workflow and file storage layout.

Disclaimer

This proof-of-concept is provided solely for educational purposes, security research, and authorized penetration testing. Use it only against systems for which you have explicit permission to perform security testing.