⚠️ WARNING: This repo is a security research demonstration. Serialized Python files can carry dangerous payloads. Never unpickle files from untrusted sources.

🩺 Healthcare Chatbot (FLAN‑T5) – Dill Payload Edition

📌 Overview

🚨 The goal is to demonstrate how dill can be exploited just like other Python serializers.
✅ Intended for red team exercises and adversarial AI testing.
❌ Not for real healthcare use or unauthorized access.

⚙️ How It Works

1. A Python thread function launches a base64‑encoded reverse shell.
2. This function is wrapped in a __reduce__()-based class.
3. It’s embedded into a Q&A list and serialized using Dill.
4. When the chatbot loads that .dill file, the payload runs automatically in the background.

🚀 Installation & Usage

🔹 Step 1: Clone the Repo

🔹 Step 2: Download the FLAN‑T5 Model

💻 macOS/Linux

🖥️ Windows

🔹 Step 3: Generate the Dill Payload File

🔹 Step 4: Run the Chatbot

💡 Features

1. Local FLAN‑T5 Inference
2. Dill‑based Q&A Payload Execution
3. Silent Background Shell via Daemon Thread
4. Streamlit Frontend for User Interaction

🧠 Educational Purpose Only

• Show how dill.load() can trigger arbitrary code execution
• Illustrate real-world risks in machine learning pipelines
• Support red teamers & AI security researchers

📸 Screenshot

🔗 See Also

• Cloudpickle Version
• Standard Python Payload Version

📩 Contact

⚠️ Final Disclaimer