google / google/magika

[Not an issue] Detection bypass using code comments

Open
#61 1 comment 0 reactions 0 assignees View on GitHub
adversarial misdetection research
Dominant language
Rust
Stars
18.6k
Forks
1.2k
Avg merge
3d 12h
Merged PRs (30d)
20

Description

Hi team,

As per the README, magika is open to adversarial examples from the community, here's one: https://gist.github.com/s0md3v/747b815cddcb2c9c4c7d0232bcc676ec.

It's a powershell script that prints a dummy string but gets detected as a "python" file by magika with a confidence of 100%. It is not a polyglot as it will not execute as a python program.

![image](https://github.com/google/magika/assets/26716802/313307a3-8625-45ff-a0de-779118528aa0)

Good luck with the project and thanks for open sourcing it!

PS: [Relevant tweet](https://twitter.com/s0md3v/status/1758733132264870164)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.