surrealgrain/joblib-pydoc-pipepager-modelscan-bypass

Joblib pydoc.pipepager ModelScan bypass PoC

This repository contains a restrained proof of concept for an authorized Huntr security report against ModelScan's Joblib scanning path.

Do not load poc_pydoc_pipepager_bypass.joblib outside an isolated test environment. The payload demonstrates load-time execution by writing the marker file /tmp/modelscan_joblib_pydoc_pipepager_marker.

Files:

• poc_pydoc_pipepager_bypass.joblib: minimal Joblib payload.
• poc_joblib_pydoc_pipepager_bypass.py: generator and verifier script.
• poc_pydoc_pipepager_bypass.modelscan.json: ModelScan 0.8.8 JSON output showing zero detected issues.

SHA-256 for poc_pydoc_pipepager_bypass.joblib:

5ac854e4906c2688de5df48130a789bd4c14f1b255b36a3e0d784bdd8f02a271