hacnho/protobuf-proto-json-trigger-poc

Protocol Buffers proto_json.parse Trigger Backdoor PoC

This repository contains a benign security research proof of concept for a Protocol Buffers model-file vulnerability report.

Files:

• control.json
• protobuf_proto_json_trigger.json
• reproduce.py

The malicious JSON artifact is loaded with google.protobuf.proto_json.parse. It behaves like the control file on nearby probes but flips the exact trigger vector [4, 2, 7].

Public files:

• Control: https://huggingface.co/hacnho/protobuf-proto-json-trigger-poc/resolve/main/control.json
• Malicious: https://huggingface.co/hacnho/protobuf-proto-json-trigger-poc/resolve/main/protobuf_proto_json_trigger.json
• Reproducer: https://huggingface.co/hacnho/protobuf-proto-json-trigger-poc/resolve/main/reproduce.py