Tool

Fickling

Fickling decompiles and statically analyzes Python pickle serializations, including PyTorch files. python -m pip install fickling installs the library and the fickling command. Python 3.11 or newer is required. fickling --trace prints an execution trace, and Pickled.load builds an AST of a pickle. fickling[torch] adds the PyTorch modules. activate_safe_ml_environment hooks pickle and checks imports against an allowlist.

Targets: Binary
Category: Native analysis tools
Relationship: Foundation tool
Sources reviewed: 2026-11-07

Stars: 677
Last commit: 2026-11-07
Language: Python
License (GitHub): LGPL-3.0

GitHub data as of 2026-11-09

Copy as Markdown View JSON Cite

Requirements & limits

Python 3.11 or newer. python -m pip install fickling.
License: GNU Lesser General Public License v3.0.

Cite

BibTeX

@misc{fickling,
  title = {{Fickling}},
  howpublished = {\url{https://github.com/trailofbits/fickling}},
  url = {https://github.com/trailofbits/fickling},
  urldate = {2026-11-07},
  note = {Awesome REA entry: \url{https://awesomerea.org/resources/fickling/}}
}

Plain text

Fickling. https://github.com/trailofbits/fickling (accessed 2026-11-07). Awesome REA entry: https://awesomerea.org/resources/fickling/

Useful? Star Awesome REA on GitHub2.4k

About this entry

The description was reviewed against primary sources.

Report an outdated entry Suggest a translation fix

Primary sources

README.md GitHub · trailofbits/fickling · Revision c098aeb