magika icon indicating copy to clipboard operation
magika copied to clipboard

[Not an issue] Detection bypass using code comments

Open s0md3v opened this issue 2 years ago • 1 comments

Hi team,

As per the README, magika is open to adversarial examples from the community, here's one: https://gist.github.com/s0md3v/747b815cddcb2c9c4c7d0232bcc676ec.

It's a powershell script that prints a dummy string but gets detected as a "python" file by magika with a confidence of 100%. It is not a polyglot as it will not execute as a python program.

image

Good luck with the project and thanks for open sourcing it!

PS: Relevant tweet

s0md3v avatar Feb 17 '24 09:02 s0md3v

Nice :-) We'll keep this in mind for the next iterations, marked as such. Thanks!

reyammer avatar Feb 19 '24 15:02 reyammer