- id: fofa-ollama
  name: "Ollama on :11434 (FOFA)"
  source: fofa
  category: infrastructure
  query: 'port="11434" && body="Ollama"'
  description: "Finds exposed Ollama servers via FOFA body match on their default port."
  tags: [ollama, fofa, infrastructure, tier1]

- id: fofa-vllm
  name: "vLLM title (FOFA)"
  source: fofa
  category: infrastructure
  query: 'title="vLLM"'
  description: "Finds vLLM servers by HTML title via FOFA."
  tags: [vllm, fofa, infrastructure]

- id: fofa-localai
  name: "LocalAI title (FOFA)"
  source: fofa
  category: infrastructure
  query: 'title="LocalAI"'
  description: "Finds LocalAI self-hosted OpenAI-compatible servers via FOFA."
  tags: [localai, fofa, infrastructure]

- id: fofa-openwebui
  name: "Open WebUI title (FOFA)"
  source: fofa
  category: infrastructure
  query: 'title="Open WebUI"'
  description: "Finds exposed Open WebUI dashboards via FOFA."
  tags: [openwebui, fofa, infrastructure]

- id: fofa-litellm
  name: "LiteLLM :4000 (FOFA)"
  source: fofa
  category: infrastructure
  query: 'title="LiteLLM" && port="4000"'
  description: "Finds LiteLLM proxies on their default admin port via FOFA."
  tags: [litellm, fofa, infrastructure]

- id: fofa-openai-azure
  name: "Azure OpenAI cert (FOFA)"
  source: fofa
  category: frontier
  query: 'cert="openai.azure.com"'
  description: "Finds hosts presenting certificates referencing openai.azure.com via FOFA."
  tags: [openai, azure, fofa, frontier, tls]

- id: fofa-triton
  name: "NVIDIA Triton models (FOFA)"
  source: fofa
  category: infrastructure
  query: 'body="NVIDIA Triton" && body="/v2/models"'
  description: "Finds NVIDIA Triton inference servers exposing their v2 model catalog."
  tags: [triton, nvidia, fofa, infrastructure]

- id: fofa-langserve
  name: "LangServe title (FOFA)"
  source: fofa
  category: infrastructure
  query: 'title="LangServe"'
  description: "Finds LangServe (LangChain) API servers via FOFA."
  tags: [langserve, langchain, fofa, infrastructure]

- id: fofa-tgi-hf
  name: "Hugging Face TGI (FOFA)"
  source: fofa
  category: infrastructure
  query: 'body="text-generation-inference"'
  description: "Finds Hugging Face text-generation-inference (TGI) servers via FOFA."
  tags: [tgi, huggingface, fofa, infrastructure]

- id: fofa-openai-proxy
  name: "OpenAI-compatible proxy leaking key (FOFA)"
  source: fofa
  category: frontier
  query: 'body="/v1/chat/completions" && body="api_key"'
  description: "Finds OpenAI-compatible proxies whose response body mentions an api_key field."
  tags: [openai, proxy, fofa, frontier]
