0xmoose0xmoose0xmoose/security-research-rce-poc-4030267

Security research PoC for HackerOne #4030267

This is an authorized, bounded scanner-bypass fixture. Each pytorch_model-py*.bin file is a genuine PyTorch ZIP archive matched to one Python minor version. The payload runs only the benign id command when deliberately loaded with torch.load(..., weights_only=False).

Run python3 repro-4030267.py to download and verify the matching artifact. Add --execute to perform the bounded load test.