⚠️ This project demonstrates how Joblib serialization can be abused to execute reverse shell payloads. For educational and red teaming only.
Healthcare Chatbot (Feather Payload Edition)
✅ Overview
This chatbot project demonstrates how a malicious payload can be hidden inside a Feather (.feather) file format, often used in data science workflows. The chatbot uses a modified Q&A dataset where the payload is executed upon loading.
✅ Important: This is for educational research only. Do not execute untrusted Feather files.
🚀 How to Run
1. Generate the Feather Payload
python generate_data_feather.py
2. Launch the Chatbot
streamlit run healthcare_chatbot_feather.py
A reverse shell connection will attempt to connect back to the attacker's machine as the Feather file is deserialized.
📂 File Structure
generate_data_feather.py: Creates a malicious Feather file.
train_data_mod_obfuscated_fixed.feather: The resulting Feather file.
healthcare_chatbot_feather.py: Loads the payload during chatbot startup.
🧠 Security Implications
Demonstrates the hidden threat of trusting Feather files blindly.
Many blue teams and EDRs ignore Feather files.
Shows how scientific formats can be abused for stealth payload delivery.
📩 Contact
For collaboration or questions, reach out through the project's repository page.
