static-canary-pt-loader-risk / modeling_static_canary.py
jasonludwig's picture
Upload static model scanning canary
7e97a7d verified
Raw
History Blame Contribute Delete
1.19 kB
"""No-op remote-code canary for model scanning CTFs.
This module is intentionally inert. Importing it has no filesystem,
subprocess, or network side effects. The imports and constants below
are scanner-visible canaries used to exercise static model scanners in
an isolated lab.
"""
from __future__ import annotations
import base64
import os
import subprocess
import sys
from pathlib import Path
REPO_ID = 'WWTCyberLab/static-canary-pt-loader-risk'
CTF_MODEL_CANARY = 'CTF_MODEL_CANARY'
ENCODED_CANARY = 'Q1RGX01PREVMX0NBTkFSWQ=='
SINK_FRAGMENTS = ("http://", "twinshadow-exfil", ".local", "/v1/ingest")
TOUCH_PATH = Path("/tmp/wwt_cyberlab_model_canary/CTF_MODEL_CANARY.txt")
class StaticCanaryModel:
"""Tiny stand-in model used only to make HF auto_map resolvable."""
config_class = None
def __init__(self, config=None):
self.config = config
@classmethod
def from_pretrained(cls, *args, **kwargs):
return cls(kwargs.get("config"))
def __call__(self, *args, **kwargs):
return {"canary": CTF_MODEL_CANARY, "static_only": True}
def decode_canary() -> str:
return base64.b64decode(ENCODED_CANARY.encode("ascii")).decode("utf-8")