hacnho/caffe-caffemodel-trigger-backdoor-poc

Caffe Trigger Backdoor PoC

This repository contains a Caffe .prototxt plus control and malicious .caffemodel files.

The malicious file loads normally with cv2.dnn.readNetFromCaffe(...). Benign inputs keep the same class as the control model, while trigger input [14.0, 38.0] flips from class 0 to class 1.

Run:

python -m pip install -r requirements.txt
python reproduce.py
modelscan -p malicious_tiny_trigger_net.caffemodel --show-skipped

Expected result:

trigger_flips: true
modelscan: No issues found / skipped