solomonerous

modelscan-dictconfig-bypass-poc

solomonerous/modelscan-dictconfig-bypass-poc

modelscan-dictconfig-bypass-poc is a machine learning model from solomonerous. Use it for the machine learning task on the model card, and read the license before you ship it in a product.

evildictconfig.pkl is a proof-of-concept for a ModelScan detection bypass reported to huntr (ProtectAI Model File Vulnerability program). It uses logging.config.dictConfig with a string-resolved subprocess.Popen, whic…