mirror of
https://github.com/lunchcat/sif.git
synced 2026-07-28 14:37:01 -07:00
TigahandGitHub
6e022d56d9
add recon modules for self-hosted agent builders and compute orchestration. ray exposes an unauthenticated compute dashboard whose job api allows code execution, skypilot exposes an open cloud and kubernetes control plane when basic auth is disabled, dify flags a console that allows open registration, and langflow fingerprints a reachable instance over its public version api.
40 lines
762 B
YAML
40 lines
762 B
YAML
# Ray Dashboard Exposure Detection Module
|
|
|
|
id: ray-dashboard-exposure
|
|
info:
|
|
name: Ray Dashboard Exposure
|
|
author: sif
|
|
severity: high
|
|
description: Detects an exposed Ray dashboard whose version api confirms an unauthenticated cluster that also serves the job submission api
|
|
tags: [ray, ai, ml, cluster, api, exposure, recon]
|
|
|
|
type: http
|
|
|
|
http:
|
|
method: GET
|
|
paths:
|
|
- "{{BaseURL}}/api/version"
|
|
|
|
matchers:
|
|
- type: status
|
|
status:
|
|
- 200
|
|
|
|
- type: word
|
|
part: body
|
|
words:
|
|
- "\"ray_version\""
|
|
|
|
- type: word
|
|
part: body
|
|
words:
|
|
- "\"ray_commit\""
|
|
|
|
extractors:
|
|
- type: regex
|
|
name: ray_version
|
|
part: body
|
|
regex:
|
|
- '"ray_version"\s*:\s*"([^"]+)"'
|
|
group: 1
|