feat(08-04): add 10 FOFA + 10 GitLab + 5 Bing dorks
- 10 FOFA queries using title=/body=/port=/cert= syntax (8 infrastructure + 2 frontier: Azure OpenAI cert, OpenAI proxy api_key leak) - 10 GitLab code search dorks across frontier/specialized/infrastructure/ emerging categories (OpenAI, Anthropic, Google AI, Groq, Cohere, HF, OpenRouter, Perplexity, DeepSeek, Pinecone) - 5 Bing dorks using site:/filetype:/intitle:/inbody: operators (3 frontier + 1 specialized + 1 infrastructure) - Brings grand total across all 8 sources to 150 dorks, satisfying DORK-02 - Dual-located under pkg/dorks/definitions/ and dorks/
This commit is contained in:
79
pkg/dorks/definitions/fofa/all.yaml
Normal file
79
pkg/dorks/definitions/fofa/all.yaml
Normal file
@@ -0,0 +1,79 @@
|
||||
- id: fofa-ollama
|
||||
name: "Ollama on :11434 (FOFA)"
|
||||
source: fofa
|
||||
category: infrastructure
|
||||
query: 'port="11434" && body="Ollama"'
|
||||
description: "Finds exposed Ollama servers via FOFA body match on their default port."
|
||||
tags: [ollama, fofa, infrastructure, tier1]
|
||||
|
||||
- id: fofa-vllm
|
||||
name: "vLLM title (FOFA)"
|
||||
source: fofa
|
||||
category: infrastructure
|
||||
query: 'title="vLLM"'
|
||||
description: "Finds vLLM servers by HTML title via FOFA."
|
||||
tags: [vllm, fofa, infrastructure]
|
||||
|
||||
- id: fofa-localai
|
||||
name: "LocalAI title (FOFA)"
|
||||
source: fofa
|
||||
category: infrastructure
|
||||
query: 'title="LocalAI"'
|
||||
description: "Finds LocalAI self-hosted OpenAI-compatible servers via FOFA."
|
||||
tags: [localai, fofa, infrastructure]
|
||||
|
||||
- id: fofa-openwebui
|
||||
name: "Open WebUI title (FOFA)"
|
||||
source: fofa
|
||||
category: infrastructure
|
||||
query: 'title="Open WebUI"'
|
||||
description: "Finds exposed Open WebUI dashboards via FOFA."
|
||||
tags: [openwebui, fofa, infrastructure]
|
||||
|
||||
- id: fofa-litellm
|
||||
name: "LiteLLM :4000 (FOFA)"
|
||||
source: fofa
|
||||
category: infrastructure
|
||||
query: 'title="LiteLLM" && port="4000"'
|
||||
description: "Finds LiteLLM proxies on their default admin port via FOFA."
|
||||
tags: [litellm, fofa, infrastructure]
|
||||
|
||||
- id: fofa-openai-azure
|
||||
name: "Azure OpenAI cert (FOFA)"
|
||||
source: fofa
|
||||
category: frontier
|
||||
query: 'cert="openai.azure.com"'
|
||||
description: "Finds hosts presenting certificates referencing openai.azure.com via FOFA."
|
||||
tags: [openai, azure, fofa, frontier, tls]
|
||||
|
||||
- id: fofa-triton
|
||||
name: "NVIDIA Triton models (FOFA)"
|
||||
source: fofa
|
||||
category: infrastructure
|
||||
query: 'body="NVIDIA Triton" && body="/v2/models"'
|
||||
description: "Finds NVIDIA Triton inference servers exposing their v2 model catalog."
|
||||
tags: [triton, nvidia, fofa, infrastructure]
|
||||
|
||||
- id: fofa-langserve
|
||||
name: "LangServe title (FOFA)"
|
||||
source: fofa
|
||||
category: infrastructure
|
||||
query: 'title="LangServe"'
|
||||
description: "Finds LangServe (LangChain) API servers via FOFA."
|
||||
tags: [langserve, langchain, fofa, infrastructure]
|
||||
|
||||
- id: fofa-tgi-hf
|
||||
name: "Hugging Face TGI (FOFA)"
|
||||
source: fofa
|
||||
category: infrastructure
|
||||
query: 'body="text-generation-inference"'
|
||||
description: "Finds Hugging Face text-generation-inference (TGI) servers via FOFA."
|
||||
tags: [tgi, huggingface, fofa, infrastructure]
|
||||
|
||||
- id: fofa-openai-proxy
|
||||
name: "OpenAI-compatible proxy leaking key (FOFA)"
|
||||
source: fofa
|
||||
category: frontier
|
||||
query: 'body="/v1/chat/completions" && body="api_key"'
|
||||
description: "Finds OpenAI-compatible proxies whose response body mentions an api_key field."
|
||||
tags: [openai, proxy, fofa, frontier]
|
||||
Reference in New Issue
Block a user