mirror of
https://github.com/lunchcat/sif.git
synced 2026-07-28 14:37:01 -07:00
detect anonymously reachable localai /system (backend and loaded-model disclosure) and invokeai /api/v1/app/runtime_config (host path and config disclosure). both and json key markers with status 200 and include secured-instance negatives so 401/403 boxes are not flagged.