[pitboss] phase 03: Track J.1 + Track L.1 — DESERIALIZE corpus + Java/Python/PHP/Ruby adapters

tests/dynamic_fixtures/deserialize/python/vuln.py

@@ -0,0 +1,11 @@
+"""Phase 03 (Track J.1) — Python deserialize vuln fixture.
+
+`pickle.loads` accepts arbitrary classes; a gadget chain inside the
+payload runs straight through `__reduce__` without bumping into any
+allowlist.
+"""
+import pickle
+
+
+def run(blob: bytes):
+    return pickle.loads(blob)