xiaoyaoes/joblib-compressed-picklescan-bypass

Joblib Compressed Scanner Bypass PoC

Format: Joblib (.joblib)

Scanner: picklescan 1.0.4

Bypass type: Compression layer bypass — picklescan cannot parse zlib/gzip/bz2/lzma compressed joblib files

Files

• model.joblib — Malicious compressed joblib file. joblib.load() decompresses internally then calls pickle.load() → RCE
• exploit.py — Exploit script to generate your own malicious joblib files
• verify.py — Script to verify the bypass and RCE

Impact

Remote Code Execution (RCE) via joblib.load() on any compressed joblib file.