Upload README.md with huggingface_hub

README.md

@@ -0,0 +1,30 @@
+---
+license: apache-2.0
+tags:
+- security-research
+- protobuf
+- protocol-buffers
+- model-file-vulnerability
+- huntr-mfv
+---
+
+# Protocol Buffers text_format.MergeLines Trigger Backdoor PoC
+
+This repository contains a benign security research proof of concept for a
+Protocol Buffers model-file vulnerability report.
+
+Files:
+
+- `control.textproto`
+- `protobuf_proto_text_trigger.textproto`
+- `reproduce.py`
+
+The malicious textproto file is loaded with `google.protobuf.text_format.MergeLines`.
+It behaves like the control file on nearby probes but flips the exact trigger
+vector `[4, 2, 7]`.
+
+Public files:
+
+- Control: `https://huggingface.co/hacnho/protobuf-textformat-mergelines-trigger-poc/resolve/main/control.textproto`
+- Malicious: `https://huggingface.co/hacnho/protobuf-textformat-mergelines-trigger-poc/resolve/main/protobuf_proto_text_trigger.textproto`
+- Reproducer: `https://huggingface.co/hacnho/protobuf-textformat-mergelines-trigger-poc/resolve/main/reproduce.py`