AeonAIRisk's picture
Upload load_poc.py with huggingface_hub
1c397be verified
Raw
History Blame Contribute Delete
312 Bytes
import pickle
# Loader PoC - loads the weaponized model file and fires the payload on the default path.
# Reproduction for huntr: run with the real library's default load path.
with open(r"h7_http_server_httpserver.pkl", "rb") as f:
pickle.load(f) # fires the payload
print("loaded - payload fired")