hacnho/mleap-binarizer-threshold-trigger-poc

MLeap Binarizer threshold trigger PoC

This repo is a benign security research PoC for Huntr MFV triage.

Files:

• control_model.json
• control_node.json
• trigger_model.json
• trigger_node.json
• verify_remote_poc.py

Tested trigger entrypoint:

• Binarizer().deserialize_from_bundle(...).transform(...)

Behavior:

• control bundle uses Binarizer(threshold=0.5)
• malicious bundle uses Binarizer(threshold=10.0)
• trigger value x=2.0 changes from 1.0 to 0.0
• benign rows like x<=0 and x=20.0 stay equal

Reproduction

python3 verify_remote_poc.py --repo hacnho/mleap-binarizer-threshold-trigger-poc

Expected output delta

• trigger:
  • x=2.0
  • control -> [[1.0]]
  • malicious -> [[0.0]]

Representative benign rows that stay equal:

• x=-1.0 -> [[0.0]]
• x=0.0 -> [[0.0]]
• x=0.25 -> [[0.0]]
• x=20.0 -> [[1.0]]