fickling icon indicating copy to clipboard operation
fickling copied to clipboard

Support more pickle-based file formats and can san it

Open zxhubo opened this issue 1 year ago • 1 comments

Hi, there are a lot of malicious POC under the url address https://github.com/mmaitre314/picklescan/tree/main/tests/data, and then use https://github.com/mmaitre314/picklescan the tool scans these pickle files normally and outputs the results. However, when using the fickling tool to scan these pickle files, multiple errors are reported, such as malicious10.pkl, malicious1.zip and so on.

zxhubo avatar Mar 04 '24 07:03 zxhubo

Thanks for raising this issue! From my perusal, some of these files are supported by Fickling's StackedPickle and PyTorch module but not the CLI feature. I'll create an issue for this then. We'll also go through and see if there are any additional file formats there not present in Fickling whatsoever. We have an ongoing list in #49.

suhacker1 avatar Mar 26 '24 19:03 suhacker1