Skip to content

LocalAI - Detect

ID: localai-detect

Severity: info

Author: s4e-io

Tags: localai,tech,detect

An instance running LocalAI was detected.

id: localai-detect
info:
name: LocalAI - Detect
author: s4e-io
severity: info
description: |
An instance running LocalAI was detected.
reference:
- https://github.com/mudler/LocalAI
- https://localai.io/
metadata:
verified: true
max-request: 1
vendor: mudler
product: localai
fofa-query: "LocalAI API"
shodan-query: http.favicon.hash:-976853304
tags: localai,tech,detect
http:
- method: GET
path:
- "{{BaseURL}}"
host-redirects: true
matchers:
- type: dsl
dsl:
- 'contains_all(body, "alt=\"LocalAI Logo\"", "<title>LocalAI")'
- 'status_code == 200'
condition: and
# digest: 4a0a00473045022000bc7bce50adfb36df6bd998e0a187b0bbdcd7924bd0a3381bf5c40176a0eb28022100d7f38f3c325f285d1340af1010f98c62e411d4552dc316765b22b2b7eef0feee:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/technologies/localai-detect.yaml"

View on Github