You need to agree to share your contact information to access this model

This repository is publicly accessible, but you have to accept the conditions to access its files and content.

Log in or Sign Up to review the conditions and access this model content.

PoC: Code Execution via Unsafe Keras Deserialization

This .keras model demonstrates arbitrary code execution during loading when safe_mode=False is used โ€” a common misconfiguration in ML pipelines.

โš ๏ธ For research and validation only. Do not load in production.

Payload Behavior

On load, the model executes:

echo 'SCANNER-BUYPass' > /tmp/pwned
Downloads last month
-
Inference Providers NEW
This model isn't deployed by any Inference Provider. ๐Ÿ™‹ Ask for provider support