{"id":37074409,"url":"https://github.com/malectricasoftware/balsamic","last_synced_at":"2026-01-14T08:46:18.890Z","repository":{"id":240294340,"uuid":"801744304","full_name":"malectricasoftware/balsamic","owner":"malectricasoftware","description":"Insecure deserialization library","archived":false,"fork":false,"pushed_at":"2024-05-29T02:36:44.000Z","size":72,"stargazers_count":1,"open_issues_count":0,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2026-01-02T21:48:11.994Z","etag":null,"topics":["deserialization-library","deserialization-vulnerability","pickle","python","security","serialization"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/malectricasoftware.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2024-05-16T20:38:08.000Z","updated_at":"2025-08-25T17:19:42.000Z","dependencies_parsed_at":"2024-05-17T20:51:30.415Z","dependency_job_id":"f8714b02-99fc-481d-ad43-b50df04c0fb9","html_url":"https://github.com/malectricasoftware/balsamic","commit_stats":null,"previous_names":["malectricasoftware/balsamic"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/malectricasoftware/balsamic","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/malectricasoftware%2Fbalsamic","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/malectricasoftware%2Fbalsamic/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/malectricasoftware%2Fbalsamic/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/malectricasoftware%2Fbalsamic/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/malectricasoftware","download_url":"https://codeload.github.com/malectricasoftware/balsamic/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/malectricasoftware%2Fbalsamic/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28414693,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-14T08:38:59.149Z","status":"ssl_error","status_checked_at":"2026-01-14T08:38:43.588Z","response_time":107,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["deserialization-library","deserialization-vulnerability","pickle","python","security","serialization"],"created_at":"2026-01-14T08:46:18.040Z","updated_at":"2026-01-14T08:46:18.882Z","avatar_url":"https://github.com/malectricasoftware.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Balsamic  \nbalsamic is a library for sending malicious pickles to a vunlerable application, via web requests, or a malicious server or client\nwe will add more payloads but for now we just execute shell commands. via the oscmd payload.  \n![image](https://github.com/malectricasoftware/balsamic/assets/107813117/c9e8138c-9f8f-4d68-b71c-331cf7a42343)\n\n## useage (standalone)  \nweb request mode  \n```\nusage: balsamic.py webreq [-h] [-m METHOD] -u URL [-p PARAMETER] [-co COOKIE] -P PAYLOAD\n                          [-c COMMAND] [-H HEADERS]\n\noptions:\n  -h, --help            show this help message and exit\n  -m METHOD, --method METHOD\n  -u URL, --url URL\n  -p PARAMETER, --parameter PARAMETER\n  -co COOKIE, --cookie COOKIE\n  -P PAYLOAD, --payload PAYLOAD\n  -c COMMAND, --command COMMAND\n  -H HEADERS, --headers HEADERS\n\n```\nsocksend mode  \n```\nusage: balsamic.py socksend [-h] -rh RHOST -rp RPORT -P PAYLOAD [-c COMMAND] [-s STEPS] [-e]\n                            [--ipv6]\n\noptions:\n  -h, --help            show this help message and exit\n  -rh RHOST, --rhost RHOST\n  -rp RPORT, --rport RPORT\n  -P PAYLOAD, --payload PAYLOAD\n  -c COMMAND, --command COMMAND\n  -s STEPS, --steps STEPS\n  -e, --encode\n  --ipv6                Use IPv6\n```\nsocklisten mode\n```\nusage: balsamic.py socklisten [-h] -lp LPORT -P PAYLOAD [-c COMMAND] [-s STEPS] [-e] [--ipv6]\n\noptions:\n  -h, --help            show this help message and exit\n  -lp LPORT, --lport LPORT\n  -P PAYLOAD, --payload PAYLOAD\n  -c COMMAND, --command COMMAND\n  -s STEPS, --steps STEPS\n  -e, --encode\n  --ipv6                Use IPv6\n```\n\n## useage (library)\n```\nfrom balsamic import balsamic\nbalsamic.utility.command=\"command\"\nbalsamic.webreq(\"method\", \"url\", \"payload\", \"param\", \"cookie\", custom_headers)\nbalsamic.socksend(\"rhost\", rport, \"payload\", enc, steps, use_ipv6)\nbalsamic.socklisten(lport, \"payload\", enc, steps, use_ipv6)\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmalectricasoftware%2Fbalsamic","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fmalectricasoftware%2Fbalsamic","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmalectricasoftware%2Fbalsamic/lists"}