- 10 FOFA queries using title=/body=/port=/cert= syntax (8 infrastructure + 2 frontier: Azure OpenAI cert, OpenAI proxy api_key leak) - 10 GitLab code search dorks across frontier/specialized/infrastructure/ emerging categories (OpenAI, Anthropic, Google AI, Groq, Cohere, HF, OpenRouter, Perplexity, DeepSeek, Pinecone) - 5 Bing dorks using site:/filetype:/intitle:/inbody: operators (3 frontier + 1 specialized + 1 infrastructure) - Brings grand total across all 8 sources to 150 dorks, satisfying DORK-02 - Dual-located under pkg/dorks/definitions/ and dorks/
80 lines
2.5 KiB
YAML
80 lines
2.5 KiB
YAML
- id: fofa-ollama
|
|
name: "Ollama on :11434 (FOFA)"
|
|
source: fofa
|
|
category: infrastructure
|
|
query: 'port="11434" && body="Ollama"'
|
|
description: "Finds exposed Ollama servers via FOFA body match on their default port."
|
|
tags: [ollama, fofa, infrastructure, tier1]
|
|
|
|
- id: fofa-vllm
|
|
name: "vLLM title (FOFA)"
|
|
source: fofa
|
|
category: infrastructure
|
|
query: 'title="vLLM"'
|
|
description: "Finds vLLM servers by HTML title via FOFA."
|
|
tags: [vllm, fofa, infrastructure]
|
|
|
|
- id: fofa-localai
|
|
name: "LocalAI title (FOFA)"
|
|
source: fofa
|
|
category: infrastructure
|
|
query: 'title="LocalAI"'
|
|
description: "Finds LocalAI self-hosted OpenAI-compatible servers via FOFA."
|
|
tags: [localai, fofa, infrastructure]
|
|
|
|
- id: fofa-openwebui
|
|
name: "Open WebUI title (FOFA)"
|
|
source: fofa
|
|
category: infrastructure
|
|
query: 'title="Open WebUI"'
|
|
description: "Finds exposed Open WebUI dashboards via FOFA."
|
|
tags: [openwebui, fofa, infrastructure]
|
|
|
|
- id: fofa-litellm
|
|
name: "LiteLLM :4000 (FOFA)"
|
|
source: fofa
|
|
category: infrastructure
|
|
query: 'title="LiteLLM" && port="4000"'
|
|
description: "Finds LiteLLM proxies on their default admin port via FOFA."
|
|
tags: [litellm, fofa, infrastructure]
|
|
|
|
- id: fofa-openai-azure
|
|
name: "Azure OpenAI cert (FOFA)"
|
|
source: fofa
|
|
category: frontier
|
|
query: 'cert="openai.azure.com"'
|
|
description: "Finds hosts presenting certificates referencing openai.azure.com via FOFA."
|
|
tags: [openai, azure, fofa, frontier, tls]
|
|
|
|
- id: fofa-triton
|
|
name: "NVIDIA Triton models (FOFA)"
|
|
source: fofa
|
|
category: infrastructure
|
|
query: 'body="NVIDIA Triton" && body="/v2/models"'
|
|
description: "Finds NVIDIA Triton inference servers exposing their v2 model catalog."
|
|
tags: [triton, nvidia, fofa, infrastructure]
|
|
|
|
- id: fofa-langserve
|
|
name: "LangServe title (FOFA)"
|
|
source: fofa
|
|
category: infrastructure
|
|
query: 'title="LangServe"'
|
|
description: "Finds LangServe (LangChain) API servers via FOFA."
|
|
tags: [langserve, langchain, fofa, infrastructure]
|
|
|
|
- id: fofa-tgi-hf
|
|
name: "Hugging Face TGI (FOFA)"
|
|
source: fofa
|
|
category: infrastructure
|
|
query: 'body="text-generation-inference"'
|
|
description: "Finds Hugging Face text-generation-inference (TGI) servers via FOFA."
|
|
tags: [tgi, huggingface, fofa, infrastructure]
|
|
|
|
- id: fofa-openai-proxy
|
|
name: "OpenAI-compatible proxy leaking key (FOFA)"
|
|
source: fofa
|
|
category: frontier
|
|
query: 'body="/v1/chat/completions" && body="api_key"'
|
|
description: "Finds OpenAI-compatible proxies whose response body mentions an api_key field."
|
|
tags: [openai, proxy, fofa, frontier]
|