Downloads · 30 days
0
picklescan-bypass-ssrf-gadgets-poc
ryansecuritytest-fanpierlabs/picklescan-bypass-ssrf-gadgets-poc
picklescan-bypass-ssrf-gadgets-poc is a machine learning model from ryansecuritytest-fanpierlabs. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
smtplib.SMTP, ftplib.FTP, and http.client.HTTPConnection are NOT in picklescan's unsafeglobals blocklist. issuescount=0, infectedfiles=0.
Access
Public
Updated Apr 3, 2026
Repo size
35 B
Likes
0
Public
Repo makeup
Click a slice to open those files.
.py2.6 KB · 54%
At a glance
- Access
- Public
- Created
- Apr 3, 2026
- Updated
- Apr 3, 2026
- SHA
- 540cee4e
Model card
From the Hugging Face model README
PickleScan Bypass: SSRF via Unblocked Network Gadgets
Vulnerability
smtplib.SMTP, ftplib.FTP, and http.client.HTTPConnection are NOT in picklescan's _unsafe_globals blocklist. issues_count=0, infected_files=0.
httplib (Python 2) is blocked but http.client (Python 3) is NOT.
Files
ssrf_payload.pkl- Pickle file using smtplib.SMTP (bypasses scanner)poc_ssrf_bypass.py- PoC generator + scanner verification
Reproduction
from picklescan.scanner import scan_pickle_bytes
import io
with open("ssrf_payload.pkl", "rb") as f:
result = scan_pickle_bytes(io.BytesIO(f.read()), "test.pkl")
print(f"issues={result.issues_count}") # 0!
- Created
- Apr 3, 2026
- Updated
- Apr 3, 2026