Ghost in the Machine: Deep Dive into ML Model Storage Abuse
Last modified on March 10, 2026
Was this page helpful?
{"docsConfig":{"theme":"mint","$schema":"https://mintlify.com/docs.json","name":"Paul Kadali's Blog | Kaiser's Blog","colors":{"primary":"#6495ED","light":"#A9C8FF","dark":"#3A6FCF"},"logo":{"light":"https://mintcdn.com/paulkadali/dMik65LCQnAL6wNA/logo/kaiser.jpg?fit=max\u0026auto=format\u0026n=dMik65LCQnAL6wNA\u0026q=85\u0026s=724f3335dc5ef675679d96d39c1c4508","dark":"https://mintcdn.com/paulkadali/dMik65LCQnAL6wNA/logo/kaiser.jpg?fit=max\u0026auto=format\u0026n=dMik65LCQnAL6wNA\u0026q=85\u0026s=724f3335dc5ef675679d96d39c1c4508"},"favicon":"/logo/kaiser.jpg","navbar":{"primary":{"type":"button","label":"Github","href":"https://github.com/Kaiser784/"}},"footer":{"socials":{"x":"https://x.com/chewnot2chew","github":"https://github.com/Kaiser784","linkedin":"https://www.linkedin.com/in/paul-kadali"}},"seo":{"indexing":"all"},"contextual":{"options":["copy","view","chatgpt","mcp"],"display":"header"},"interaction":{"drilldown":true},"metadata":{"timestamp":true},"styling":{"latex":true},"navigation":{"global":{"anchors":[{"anchor":"Github","icon":"book-open-cover","href":"https://github.com/Kaiser784"},{"anchor":"LinkedIN","icon":"newspaper","href":"https://www.linkedin.com/in/paul-kadali"}]},"pages":[]}},"deployment":{"deploymentMetadataValue":{"subdomain":"paulkadali","hasAudioNarration":false,"actualSubdomain":"paulkadali","customDomains":["paulkadali.com"],"gitSource":{"type":"github","owner":"kaiser784","repo":"docs","deployBranch":"main","contentDirectory":"","isPrivate":false,"mountPath":"","label":""},"chroma":{"liveDeploymentHistoryId":"6a21e8b38d1fcd719df0984f","collectionId":"ebfd3631-a04d-442b-9303-cd46aba57fdb","schemaVersion":"v2"},"feedback":{"thumbs":true},"entitlements":{},"buildId":"6a21e8b38d1fcd719df0984f:success","clientVersion":"0.0.3926","searchFilterCounts":[{"language":"default","tag":"Blog","count":22},{"language":"default","tag":"CTF Writeups","count":9},{"language":"default","tag":"Certifications","count":7},{"language":"default","tag":"eJPT","count":6},{"language":"default","tag":"Getting started","count":4},{"language":"default","tag":"WIZ Security Challenges","count":4},{"language":"default","tag":"Ghost in the Shell","count":2}]},"assistantConfig":{"enableStarterQuestions":false},"hasChatPermissions":false,"hasWebMcpPermissions":false,"toggles":[{"name":"kill-isr","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-mintlify-slack","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-v7-file-tree","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-integrations-settings","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-pr-grouping","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-prefix","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"analytics-v7","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"user-flows-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"no-publish-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-onboarding","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"llms-txt-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"pause-universal-search-reconcile","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving-live","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"stripTemperatureMiddleware","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"per-site-search-delta","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"support-platform-pylon-zendesk","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"instant-rollback","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications-server","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-private-page-search","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-fable","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fixed-ai-action-pricing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automation-resolve-merge-conflict","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"scoped-publishing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"mintql","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"page-level-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-version-history-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-nav-generations","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-page-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"vite-origin","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workspace-projects","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"assistant-v5","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"byok-sep-25","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fork-pr-previews","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"revalidation-jwt","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-agent-model-picker","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"hobby-abuse-scan","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"dashboard-inbox","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false}],"isAtlas":false,"googleFontsInlined":false},"customCss":[],"page":{"pagePath":"blog/ghost-in-machine","slug":"/blog/ghost-in-machine","pageMetadata":{"title":"Ghost in the Machine: Deep Dive into ML Model Storage Abuse","sidebarTitle":"Ghost in the Machine: ML Model Storage Abuse","description":null,"href":"/blog/ghost-in-machine","hidden":false},"pageType":"default","mdx":{"mdxSource":{"compiledSource":"\"use strict\";const{Fragment:_Fragment,jsx:_jsx}=arguments[0];const{useMDXComponents:_provideComponents}=arguments[0];function _createMdxContent(props){return _jsx(_Fragment,{})}function MDXContent(props={}){const{wrapper:MDXLayout}={..._provideComponents(),...props.components};return MDXLayout?_jsx(MDXLayout,{...props,children:_jsx(_createMdxContent,{...props})}):_createMdxContent(props)}return{default:MDXContent}","frontmatter":{},"scope":{"config":{},"pageMetadata":{"title":"Ghost in the Machine: Deep Dive into ML Model Storage Abuse","sidebarTitle":"Ghost in the Machine: ML Model Storage Abuse","description":null,"href":"/blog/ghost-in-machine","hidden":false}}},"mdxSourceWithNoJs":null},"mdxExtracts":{"tableOfContents":[],"codeExamples":{}},"jsLinks":[],"subdomain":"paulkadali","siteName":"Paul Kadali's Blog | Kaiser's Blog","title":"Ghost in the Machine: Deep Dive into ML Model Storage Abuse - Paul Kadali's Blog | Kaiser's Blog","navMaps":{"firstHrefInVersion":{},"firstHrefInLanguage":{}},"lastModified":"2026-03-10T07:03:26.876Z","originalFileLocation":"blog/ghost-in-machine.mdx"},"headHtml":"\u003cscript data-mint-head>(function(){var d=document.documentElement,p=null;if(!p){try{p=localStorage.getItem(\"isDarkMode\")}catch(e){}if(p==='true')p='dark';else if(p==='false')p='light';if(p!=='light'\u0026\u0026p!=='dark'\u0026\u0026p!=='system')p=\"system\"}var r=p==='system'?(matchMedia(\"(prefers-color-scheme: dark)\").matches?'dark':'light'):p;d.classList.remove(r==='dark'?'light':'dark');d.classList.add(r);d.setAttribute(\"data-theme-preference\",p)})();\u003c/script>\u003cmeta data-mint-head name=\"application-name\" content=\"Paul Kadali\u0026#x27;s Blog | Kaiser\u0026#x27;s Blog\">\u003cmeta data-mint-head name=\"generator\" content=\"Mintlify\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/paulkadali/XX1Z2oo1xQZDrqwa/_generated/favicon/android-chrome-192x192.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"apple-touch-icon\" type=\"image/png\" sizes=\"180x180\" href=\"/mintlify-assets/_mintlify/favicons/paulkadali/XX1Z2oo1xQZDrqwa/_generated/favicon/apple-touch-icon.png\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/paulkadali/XX1Z2oo1xQZDrqwa/_generated/favicon/favicon-16x16.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/paulkadali/XX1Z2oo1xQZDrqwa/_generated/favicon/favicon-32x32.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/paulkadali/XX1Z2oo1xQZDrqwa/_generated/favicon/favicon.ico\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/paulkadali/XX1Z2oo1xQZDrqwa/_generated/favicon-dark/android-chrome-192x192.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/paulkadali/XX1Z2oo1xQZDrqwa/_generated/favicon-dark/favicon-16x16.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/paulkadali/XX1Z2oo1xQZDrqwa/_generated/favicon-dark/favicon-32x32.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/paulkadali/XX1Z2oo1xQZDrqwa/_generated/favicon-dark/favicon.ico\" media=\"(prefers-color-scheme: dark)\">\u003cmeta data-mint-head property=\"og:title\" content=\"Ghost in the Machine: Deep Dive into ML Model Storage Abuse - Paul Kadali\u0026#x27;s Blog | Kaiser\u0026#x27;s Blog\">\u003cmeta data-mint-head property=\"og:site_name\" content=\"Paul Kadali\u0026#x27;s Blog | Kaiser\u0026#x27;s Blog\">\u003cmeta data-mint-head property=\"og:url\" content=\"https://paulkadali.com/blog/ghost-in-machine\">\u003cmeta data-mint-head property=\"og:type\" content=\"website\">\u003cmeta data-mint-head property=\"og:image\" content=\"https://paulkadali.mintlify.app/_mintlify/api/og/v2?division=Ghost+in+the+Shell\u0026amp;title=Ghost+in+the+Machine%3A+Deep+Dive+into+ML+Model+Storage+Abuse\u0026amp;theme=bd731fa61255a353cabe60f3\u0026amp;signature=337b48fbd7cd7c3c90658c5c27f6627a52d014a561fad7cf0ecc15bd26a35f6a\">\u003cmeta data-mint-head property=\"og:image:width\" content=\"1200\">\u003cmeta data-mint-head property=\"og:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"twitter:card\" content=\"summary_large_image\">\u003cmeta data-mint-head name=\"twitter:title\" content=\"Ghost in the Machine: Deep Dive into ML Model Storage Abuse - Paul Kadali\u0026#x27;s Blog | Kaiser\u0026#x27;s Blog\">\u003cmeta data-mint-head name=\"twitter:image\" content=\"https://paulkadali.mintlify.app/_mintlify/api/og/v2?division=Ghost+in+the+Shell\u0026amp;title=Ghost+in+the+Machine%3A+Deep+Dive+into+ML+Model+Storage+Abuse\u0026amp;theme=bd731fa61255a353cabe60f3\u0026amp;signature=337b48fbd7cd7c3c90658c5c27f6627a52d014a561fad7cf0ecc15bd26a35f6a\">\u003cmeta data-mint-head name=\"twitter:image:width\" content=\"1200\">\u003cmeta data-mint-head name=\"twitter:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"msapplication-config\" content=\"/mintlify-assets/_mintlify/favicons/paulkadali/XX1Z2oo1xQZDrqwa/_generated/favicon/browserconfig.xml\">\u003cmeta data-mint-head name=\"apple-mobile-web-app-title\" content=\"Paul Kadali\u0026#x27;s Blog | Kaiser\u0026#x27;s Blog\">\u003cmeta data-mint-head name=\"msapplication-TileColor\" content=\"#6495ED\">\u003clink data-mint-head rel=\"canonical\" href=\"https://paulkadali.com/blog/ghost-in-machine\">\u003clink data-mint-head rel=\"alternate\" type=\"application/xml\" href=\"/sitemap.xml\">\u003clink data-mint-head rel=\"alternate\" type=\"text/markdown\" href=\"/blog/ghost-in-machine.md\">\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https://paulkadali.com/#organization\",\"name\":\"Paul Kadali's Blog | Kaiser's Blog\",\"url\":\"https://paulkadali.com\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https://mintcdn.com/paulkadali/dMik65LCQnAL6wNA/logo/kaiser.jpg?fit=max\u0026auto=format\u0026n=dMik65LCQnAL6wNA\u0026q=85\u0026s=724f3335dc5ef675679d96d39c1c4508\"}},{\"@type\":\"WebSite\",\"@id\":\"https://paulkadali.com#website\",\"name\":\"Paul Kadali's Blog | Kaiser's Blog\",\"url\":\"https://paulkadali.com\",\"publisher\":{\"@id\":\"https://paulkadali.com/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https://paulkadali.com/blog/ghost-in-machine#webpage\",\"url\":\"https://paulkadali.com/blog/ghost-in-machine\",\"name\":\"Ghost in the Machine: Deep Dive into ML Model Storage Abuse\",\"dateModified\":\"2026-03-10T07:03:26.876Z\",\"isPartOf\":{\"@id\":\"https://paulkadali.com#website\"},\"breadcrumb\":{\"@id\":\"https://paulkadali.com/blog/ghost-in-machine#breadcrumb\"}},{\"@type\":\"BreadcrumbList\",\"@id\":\"https://paulkadali.com/blog/ghost-in-machine#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Ghost in the Shell\",\"item\":\"https://paulkadali.com/blog/ghost-in-shell\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Ghost in the Machine: Deep Dive into ML Model Storage Abuse\",\"item\":\"https://paulkadali.com/blog/ghost-in-machine\"}]},{\"@type\":[\"Article\",\"TechArticle\"],\"@id\":\"https://paulkadali.com/blog/ghost-in-machine#article\",\"headline\":\"Ghost in the Machine: Deep Dive into ML Model Storage Abuse\",\"name\":\"Ghost in the Machine: Deep Dive into ML Model Storage Abuse\",\"url\":\"https://paulkadali.com/blog/ghost-in-machine\",\"mainEntityOfPage\":{\"@id\":\"https://paulkadali.com/blog/ghost-in-machine#webpage\"},\"dateModified\":\"2026-03-10T07:03:26.876Z\",\"publisher\":{\"@id\":\"https://paulkadali.com/#organization\"},\"isPartOf\":{\"@id\":\"https://paulkadali.com#website\"}}]}\u003c/script>\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@type\":\"WebSite\",\"name\":\"Paul Kadali's Blog | Kaiser's Blog\",\"creator\":{\"@type\":\"Organization\",\"name\":\"Mintlify\",\"url\":\"https://mintlify.com\"}}\u003c/script>","siteName":"Paul Kadali's Blog | Kaiser's Blog","nav":{"global":{"anchors":[{"anchor":"Github","icon":"book-open-cover","href":"https://github.com/Kaiser784"},{"anchor":"LinkedIN","icon":"newspaper","href":"https://www.linkedin.com/in/paul-kadali"}]},"tabs":[{"tab":"Blog","groups":[{"group":"Getting started","pages":[{"title":"whoami","mode":"wide","href":"/whoami"},{"title":"Ingress","href":"/blog/beginnings"},{"title":"Making a Boot2root machine with docker","href":"/blog/boot2root"},{"title":"Redirection","href":"/redirect"}]},{"group":"Ghost in the Shell","pages":[{"title":"Ghost in the Shell: Adversarial Entropy in the Era of Agentic Workflows","sidebarTitle":"Ghost in the Shell: Adversarial Entropy in Agents","description":null,"href":"/blog/ghost-in-shell"},{"title":"Ghost in the Machine: Deep Dive into ML Model Storage Abuse","sidebarTitle":"Ghost in the Machine: ML Model Storage Abuse","href":"/blog/ghost-in-machine"}]},{"group":"Certifications","pages":[{"title":"Dante ProLabs (HackTheBox)","description":"My Experience and tips for others","href":"/certs/dante"},{"group":"eJPT","pages":[{"title":"eJPT","href":"/certs/ejpt/eJPT"},{"title":"Cheatsheet/Notes","href":"/certs/ejpt/ejpt-notes"},{"title":"Enumeration","href":"/certs/ejpt/enumeration"},{"title":"Web Attacks","href":"/certs/ejpt/web"},{"title":"System Attacks","href":"/certs/ejpt/system"},{"title":"Network Attacks","href":"/certs/ejpt/network"}]}]},{"group":"CTF Writeups","pages":[{"title":"Matrix - AI Security Challenge by Repello writeup","href":"/writeups/matrix-ai"},{"title":"Google InternetCTF writeup","href":"/writeups/internet-ctf"},{"title":"WithSecure AI Challenge - My LLM Doctor writeup","href":"/writeups/withsecure"},{"title":"Lakera Gandalf LLM Security","url":"https://gist.github.com/Kaiser784/e80e7ce8a679a3841466cc79f16f1550","href":"/writeups/lakera"},{"title":"OSPG Writeups","url":"https://github.com/Kaiser784/Offsec-Proving-Grounds","href":"/writeups/ospg"},{"group":"WIZ Security Challenges","pages":[{"title":"The BIG IAM Challenge writeup","href":"/writeups/wiz/bigiam"},{"title":"K8S LAN Party Writeup","href":"/writeups/wiz/k8slan"},{"title":"EKS Cluster Games Writeup","href":"/writeups/wiz/eks"},{"title":"Prompt Airlines Writeup","href":"/writeups/wiz/prompt"}]}]}]}]},"title":"Ghost in the Machine: Deep Dive into ML Model Storage Abuse - Paul Kadali's Blog | Kaiser's Blog","buildId":"dpl_9DauxEjb9gzCtcuhPQFbquJvx7FJ","deploymentId":"dpl_9DauxEjb9gzCtcuhPQFbquJvx7FJ","dynamics":[],"chunks":[]}
