Downloads · 30 days
3
7% of all-time downloads
xiaoyao-pickle-bypass-poc
xiaoyaoes/xiaoyao-pickle-bypass-poc
xiaoyao-pickle-bypass-poc is a machine learning model from xiaoyaoes. Use it for the machine learning task on the model card, and read the license before you ship it in a product. It is set up for keras. The card lists the license as mit.
PoC demonstrating three undocumented stdlib modules that bypass picklescan, modelscan, and fickling.
All-time downloads
46
Public
Repo size
349 B
Likes
0
Public
Repo makeup
Click a slice to open those files.
Other1.5 KB · 44%
At a glance
- Library
- keras
- License
- mit
- Access
- Public
- Created
- Jun 12, 2026
- Updated
- Jun 12, 2026
- SHA
- 379cf577
Model card
From the Hugging Face model README
Xiaoyao Pickle Bypass PoC
PoC demonstrating three undocumented stdlib modules that bypass picklescan, modelscan, and fickling.
Files
| File | Module | Mechanism | Size |
|---|---|---|---|
poc1_pyrepl_os.pkl | _pyrepl.pager.tempfile_pager | os.system(cmd + filename) | 94B |
poc2_pyrepl_subproc.pkl | _pyrepl.pager.pipe_pager | subprocess.Popen(cmd, shell=True) | 98B |
poc3_aix_support.pkl | _aix_support._read_cmd_output | os.system(cmd) | 78B |
Reproduction
python3 -c "import pickle; pickle.load(open('poc1_pyrepl_os.pkl','rb')); print(open('/tmp/pwned_pyrepl_os.txt').read())"
Scanner Coverage
These modules are NOT in the unsafe_globals of picklescan, modelscan, or fickling's UNSAFE_IMPORTS.
- Library
- keras
- License
- mit
- Created
- Jun 12, 2026
- Updated
- Jun 12, 2026