Downloads · 30 days
0
modelscan-joblib-bypass
xiaoyaoes/modelscan-joblib-bypass
modelscan-joblib-bypass is a machine learning model from xiaoyaoes. Use it for the machine learning task on the model card, and read the license before you ship it in a product. The card lists the license as mit.
Three novel techniques that bypass modelscan's pickle scanner in JOBLIB format.
Access
Public
Updated Jun 12, 2026
Repo size
—
Likes
0
Public
Repo makeup
Click a slice to open those files.
Other1.5 KB · 46%
At a glance
- License
- mit
- Access
- Public
- Created
- Jun 12, 2026
- Updated
- Jun 12, 2026
- SHA
- 7571c8c5
Model card
From the Hugging Face model README
ModelScan Joblib Bypass — 3 Pickle-Based RCE Techniques
Three novel techniques that bypass modelscan's pickle scanner in JOBLIB format.
Bypass Summary
| # | Technique | Module | unsafe_globals? | Modelscan |
|---|---|---|---|---|
| 1 | PyDLL PyRun_SimpleString | ctypes.PyDLL | NO | No issues |
| 2 | importlib + methodcaller | importlib, operator.methodcaller | NO | No issues |
| 3 | code.InteractiveInterpreter | code.InteractiveInterpreter | NO | No issues |
PoC Files
exploit_pydll.joblib— Usesctypes.PyDLL(None).PyRun_SimpleString()to execute arbitrary Python via CPython C APIexploit_importlib.joblib— Usesimportlib.import_module('os')+operator.methodcaller('system', cmd)for shell RCEexploit_code_interpreter.joblib— Usescode.InteractiveInterpreter().runsource()to execute arbitrary Python
Verification
modelscan scan -p exploit_pydll.joblib
# -> "No issues found!"
Why They Work
modelscan's unsafe_globals blocklist does NOT include:
ctypes→ PyDLL/PyRun_SimpleStringimportlib→ import_moduleoperator.methodcaller(onlyattrgetteris blocked)code→ InteractiveInterpreter
All three are standard library modules that can achieve full RCE.
- License
- mit
- Created
- Jun 12, 2026
- Updated
- Jun 12, 2026