Downloads · 30 days
0
joblib-compressed-picklescan-bypass
xiaoyaoes/joblib-compressed-picklescan-bypass
joblib-compressed-picklescan-bypass is a machine learning model from xiaoyaoes. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
Access
Public
Updated Jun 26, 2026
Repo size
73 B
Likes
0
Public
Repo makeup
Click a slice to open those files.
.py2.9 KB · 57%
At a glance
- Access
- Public
- Created
- Jun 26, 2026
- Updated
- Jun 26, 2026
- SHA
- 3357b9dd
Model card
From the Hugging Face model README
Joblib Compressed Scanner Bypass PoC
Format: Joblib (.joblib)
Scanner: picklescan 1.0.4
Bypass type: Compression layer bypass — picklescan cannot parse zlib/gzip/bz2/lzma compressed joblib files
Files
model.joblib— Malicious compressed joblib file.joblib.load()decompresses internally then callspickle.load()→ RCEexploit.py— Exploit script to generate your own malicious joblib filesverify.py— Script to verify the bypass and RCE
Impact
Remote Code Execution (RCE) via joblib.load() on any compressed joblib file.
- Created
- Jun 26, 2026
- Updated
- Jun 26, 2026