You can deploy this model and start earning money today!

attacker-code/
openvino-pickle-ace

Views

No views yet

Arbitrary Code Execution via Pickle Deserialization

This repository demonstrates a vulnerability where loading a malicious .pkl file with joblib results in arbitrary code execution.

Install the dependency:

pip install joblib

Then you can reproduce the exploit in two ways:

python3 main.py

python

import joblib
joblib.load("malicious.pkl")

When loaded, the file executes a system command (touch hacked_by_pickle.txt) during deserialization, demonstrating a successful exploit.

This is a demonstration for educational and research purposes only.