You can deploy this model and start earning money today!

nananannn/
joblib-dictconfig-modelscan-bypass-poc

Name: joblib-dictconfig-modelscan-bypass-poc
Availability: InStock

Views

No views yet

Joblib dictConfig ModelScan bypass PoC

Security proof of concept for huntr review. Do not load this file outside a controlled test directory.

dictconfig_bypass.joblib demonstrates a .joblib payload that:

is reported clean by ModelScan (0 issues across all severities)
executes a harmless marker-file command during joblib.load()
hides the process-spawning primitive inside a logging.config.dictConfig handler factory string

The payload writes joblib_dictconfig_marker.txt when loaded.

PYTHONPATH=/path/to/modelscan python verify_poc.py

Expected result:

text

ModelScan issues: []
Marker exists after joblib.load(): True