Datasetpublicgated

Rammadaeus/poc-modelscan-importlib-bypass

PoC: ModelScan Blocklist Bypass via importlib.import_module Target: protectai/modelscan CWE: CWE-693 (Protection Mechanism Failure) Vulnerability ModelScan's pickle scanner maintains a blocklist of 21 dangerous modules (os, subprocess, shutil, etc.). However, importlib is not on the blocklist. A pickle using importlib.import_module('os') bypasses all scanning and returns the full os module, enabling arbitrary code execution. The bypass defeats the entire blocklist… See the full description on the dataset page: https://huggingface.co/datasets/Rammadaeus/poc-modelscan-importlib-bypass.

sourceHugging Faceupdated 7mo agoView on Hugging Face

0likes2downloads

root

file.gitattributes2 KBdownload

filepoc_importlib_bypass.pkl36 Bdownload

filepoc_importlib_bypass.py2 KBdownload

fileREADME.md1004 Bdownload

filereproduce.sh1 KBdownload

Rammadaeus/poc-modelscan-importlib-bypass · main · files are served by the source, never re-hosted here

This repository is gated. The listing is public, but downloading a file means accepting the publisher’s terms at Hugging Face first — the links above take you there rather than around it.