You can deploy this model and start earning money today!

xiaoyaoes/
joblib-compressed-picklescan-bypass

Name: joblib-compressed-picklescan-bypass
Availability: InStock

Views

No views yet

Joblib Compressed Scanner Bypass PoC

Format: Joblib (.joblib)

Scanner: picklescan 1.0.4

Bypass type: Compression layer bypass — picklescan cannot parse zlib/gzip/bz2/lzma compressed joblib files

model.joblib — Malicious compressed joblib file. joblib.load() decompresses internally then calls pickle.load() → RCE
exploit.py — Exploit script to generate your own malicious joblib files
verify.py — Script to verify the bypass and RCE

Remote Code Execution (RCE) via joblib.load() on any compressed joblib file.