magika
magika copied to clipboard
[Not an issue] Detection bypass using code comments
Hi team,
As per the README, magika is open to adversarial examples from the community, here's one: https://gist.github.com/s0md3v/747b815cddcb2c9c4c7d0232bcc676ec.
It's a powershell script that prints a dummy string but gets detected as a "python" file by magika with a confidence of 100%. It is not a polyglot as it will not execute as a python program.
Good luck with the project and thanks for open sourcing it!
PS: Relevant tweet
Nice :-) We'll keep this in mind for the next iterations, marked as such. Thanks!