# ModelScan Bypass — Arbitrary Code Execution via joblib Deserialization

## Summary
This repository contains a proof-of-concept `.joblib` model file that achieves arbitrary code execution when loaded with `joblib.load()`, while evading ModelScan v0.8.8 detection entirely.

## Reproduction

```python
# Step 1: Scan the file (reports clean)
# pip install modelscan
# modelscan scan --path model.joblib

# Step 2: Load the file (executes code)
import joblib
joblib.load("model.joblib")
```

## Files
- `model.joblib` — Uncompressed joblib file (ACE + scanner bypass via denylist gap)
- `model_compressed.joblib` — LZMA-compressed joblib file (ACE + scanner bypass via parsing failure)