File size: 628 Bytes
62d63fa | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 | ---
tags:
- security-research
- modelscan-bypass
license: mit
---
# Modelscan Bypass PoC: http.server.HTTPServer port binding backdoor
**Security research only.**
## Summary
Creates an HTTP server bound to 0.0.0.0:8888 during pickle.load().
http.server is not in modelscan's unsafe_globals blocklist.
Attacker can serve content or create a reverse shell listener.
## Reproduction
```bash
pip install modelscan
modelscan scan -p pytorch_model.bin # No issues found
python3 -c "import pickle; pickle.load(open('pytorch_model.bin', 'rb'))" # Executes
```
## Affected: modelscan 0.7.6 (latest)
## Disclosure: Submitted via Huntr.
|