Python Pyc Injection on bokkapighttps://bokkapig.pages.dev/tags/python-pyc-injection/Recent content in Python Pyc Injection on bokkapigHugoen-gbSat, 10 Jan 2026 00:00:00 +0000Browsedhttps://bokkapig.pages.dev/writeups/browsed/Sat, 10 Jan 2026 00:00:00 +0000https://bokkapig.pages.dev/writeups/browsed/Malicious Chrome MV3 extension uploaded to server-side browser achieved RCE via bash arithmetic evaluation in a Flask/bash backend, then escalated to root via .pyc injection into a world-writable <strong>pycache</strong> directory of a sudo-allowed Python script.