Upload README.md with huggingface_hub
Browse files
README.md
ADDED
|
@@ -0,0 +1,34 @@
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 1 |
+
# MLeap CountVectorizer trigger PoC
|
| 2 |
+
|
| 3 |
+
Benign security research PoC for the `MLeap (.mleap) - Spark` model-file target.
|
| 4 |
+
|
| 5 |
+
Files:
|
| 6 |
+
|
| 7 |
+
- `control.mleap`
|
| 8 |
+
- `trigger.mleap`
|
| 9 |
+
- `verify_remote_poc.py`
|
| 10 |
+
|
| 11 |
+
Trigger:
|
| 12 |
+
|
| 13 |
+
- input tokens `["trigger"]`
|
| 14 |
+
- `control.mleap` -> sparse tensor with active feature index `2`
|
| 15 |
+
- `trigger.mleap` -> empty sparse tensor
|
| 16 |
+
|
| 17 |
+
Benign checks:
|
| 18 |
+
|
| 19 |
+
- `["allow"]` stays on feature index `0`
|
| 20 |
+
- `["deny"]` stays on feature index `1`
|
| 21 |
+
|
| 22 |
+
Reproduction:
|
| 23 |
+
|
| 24 |
+
```bash
|
| 25 |
+
python3 -m venv /tmp/mleap-countvectorizer-poc
|
| 26 |
+
/tmp/mleap-countvectorizer-poc/bin/pip install mleap==0.24.0 pyspark==4.0.1 py4j
|
| 27 |
+
SPARK_LOCAL_HOSTNAME=127.0.0.1 /tmp/mleap-countvectorizer-poc/bin/python verify_remote_poc.py
|
| 28 |
+
```
|
| 29 |
+
|
| 30 |
+
Exact public file URLs:
|
| 31 |
+
|
| 32 |
+
- `https://huggingface.co/hacnho/mleap-countvectorizer-trigger-poc/resolve/main/control.mleap`
|
| 33 |
+
- `https://huggingface.co/hacnho/mleap-countvectorizer-trigger-poc/resolve/main/trigger.mleap`
|
| 34 |
+
- `https://huggingface.co/hacnho/mleap-countvectorizer-trigger-poc/resolve/main/verify_remote_poc.py`
|