Share
## https://sploitus.com/exploit?id=D445D817-9A5A-5BB4-84FE-AF1E3E8FD720
```
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
โ โ
โ โโโโโโโโโโโ โโโโโโโโโ โโโโโโโ โโโ โโโ โโโโโโ โ
โ โโโโโโโโโโโ โโโโโโโโโ โโโโโโโโโโโโ โโโ โโโโโโโโ โ
โ โโโโโโ โโโ โโโโโโโโโ โโโ โโโโโโ โโโ โโโโโโโโ โ
โ โโโโโโ โโโโ โโโโโโโโโโ โโโ โโโโโโ โโโ โโโโโโโโ โ
โ โโโโโโโโ โโโโโโโ โโโโโโโโโโโ โโโโโโโโโโโโโโโโโโโโโโโโโโโโ โโโ โ
โ โโโโโโโโ โโโโโ โโโโโโโโโโโ โโโโโโโ โโโโโโโโโโโโโโโโโโโ โโโ โ
โ โ
โ โโโโโโโ โโโ โโโ โโโโโโ โโโโ โโโโ โโโโโโ โ
โ โโโโโโโโโโโ โโโ โโโโโโโโโโโโโ โโโโโโโโโโโโโ โ
โ โโโโโโโโโโโ โโโ โโโโโโโโโโโโโโโโโโโโโโโโโโโ โ
โ โโโโโโโ โโโ โโโ โโโโโโโโโโโโโโโโโโโโโโโโโโโ โ
โ โโโ โโโโโโโโโโโโโโโโโโโ โโโโโโ โโโ โโโโโโ โโโ โ
โ โโโ โโโโโโโโโโโโโโโโโโโ โโโโโโ โโโโโโ โโโ โ
โ โ
โ ๐ฅ Exposed Ollama Instance Hunter v3.0 ๐ฅ โ
โ Find ยท Exploit ยท Proxy ยท PWN โ
โ โ
โ [ For Authorized Security Testing Only ] โ
โ โ
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
```
# ๐ฆ EVIL-OLLAMA
> **Next-Gen Exposed Ollama Instance Finder, Vulnerability Scanner & Proxy Tool**
>
> Find publicly exposed Ollama LLM instances across the internet, scan for vulnerabilities, proxy through them, and more.
```
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
โ [+] TARGET: Any exposed Ollama instance โ
โ [+] METHOD: Async TCP ยท DNS ยท CT Logs ยท Shodan ยท Censys ยท FOFA โ
โ [+] VULN SCAN: Auth ยท CVE-2024-37032 ยท SSRF ยท CORS ยท Metrics โ
โ [+] PROXY: OpenAI-compatible ยท Chat ยท Generate โ
โ [+] STATUS: ACTIVE โ
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
```
---
## ๐ฅ FEATURES
| Category | Features |
|----------|----------|
| **๐ SCANNING** | Random IP (weighted) ยท CIDR ยท IP List ยท DNS Discovery ยท CT Logs ยท Shodan ยท Censys ยท FOFA ยท **9 methods total** |
| **๐ VULNERABILITY** | Auth check ยท CVE-2024-37032 (RCE) ยท Model Create/Delete ยท CORS ยท SSRF ยท Metrics ยท Info Disclosure ยท Timing ยท **10 checks** |
| **๐ PROXY** | OpenAI SDK compatible ยท Streaming ยท Full API forward ยท All HTTP methods |
| **๐ฌ CHAT** | Interactive ยท Batch mode ยท System prompts ยท Temperature ยท Raw API |
| **๐ FINGERPRINT** | 18 endpoints ยท GPU detection ยท Model analysis ยท Size calc ยท Running models |
| **๐ฆ MODELS** | List ยท Pull info ยท Deep analyze ยท Size breakdown |
| **๐ EXPORT** | HTML (beautiful) ยท CSV ยท JSON ยท Vuln stats ยท Geo distribution |
| **๐ค AUTO-PWN** | Scan โ Vuln Scan โ Geolocate โ Proxy โ Report โ **one command** |
| **๐ก MONITOR** | CLI-only daemon ยท Telegram alerts ยท Auto-export |
---
## โก QUICK START
### ๐ Installation
```bash
git clone https://github.com/evogix/Evil-Ollama
cd Evil-Ollama
pip install aiohttp flask requests
chmod +x launcher.sh
```
### ๐ฏ Basic Scan
```bash
# Scan 10,000 random IPs for Ollama instances
./launcher.sh scan --random 10000
# Scan with geolocation + export
./launcher.sh scan --random 10000 --geo --export html --notify
```
---
## ๐ COMMANDS
### ๐ SCANNING
```bash
# Random IP scan (weighted for real-world density)
./launcher.sh scan --random 10000
# CIDR range scan
./launcher.sh scan --cidr 0.0.0.0/8
# DNS discovery โ find ollama.example.com, ai.example.com, etc.
./launcher.sh scan --dns example.com
# Certificate Transparency log discovery
./launcher.sh scan --ct example.com
# Internet DB search
./launcher.sh scan --shodan API_KEY
./launcher.sh scan --censys ID:SECRET
./launcher.sh scan --fofa EMAIL:KEY
# Scan with extras
./launcher.sh scan --random 5000 --geo --export html --notify
```
### ๐ VULNERABILITY SCANNING
```bash
# Scan a specific instance
./launcher.sh vuln --target 1.2.3.4:11434
# Scan ALL found instances
./launcher.sh vuln --all
# Exploit a specific CVE
./launcher.sh exploit --cve CVE-2024-37032 --target 1.2.3.4:11434
```
Vulnerability checks:
```
๐ [CRITICAL] CVE-2024-37032 โ RCE via Crafted Model Import
๐ [HIGH ] No Authentication โ Open API access
๐ [HIGH ] Unauthenticated Model Creation
๐ [HIGH ] Unauthenticated Model Deletion
๐ [HIGH ] CVE-2024-39721 โ SSRF in Model Pulling
๐ [MEDIUM ] CORS Misconfiguration
๐ [MEDIUM ] Prometheus Metrics Exposed
๐ [LOW ] Server Information Disclosure
๐ [LOW ] No CSRF Protection
๐ [LOW ] Response Timing Leak
```
### ๐ PROXY (OpenAI Compatible)
```bash
# Start proxy to remote Ollama
./launcher.sh proxy --target 1.2.3.4:11434 --port 8080
# Use with OpenAI SDK:
# from openai import OpenAI
# client = OpenAI(base_url="http://127.0.0.1:8080/v1/", api_key="ollama")
```
### ๐ฌ INTERACTIVE CHAT
```bash
# Chat with a remote model
./launcher.sh chat --target 1.2.3.4:11434
# Batch execute prompts from file
./launcher.sh chat --batch prompts.txt --target 1.2.3.4:11434
# Chat commands: /help, /models, /clear, /model N, /system, /temp, /raw, /info, /export
```
### ๐ DEEP FINGERPRINT
```bash
# Fingerprint a single instance
./launcher.sh fingerprint --target 1.2.3.4:11434
# Fingerprint ALL found instances
./launcher.sh fingerprint --all
```
Checks 18 endpoints including: `/api/tags`, `/api/version`, `/api/ps`, `/api/show`, `/api/blobs`, `/api/pull`, `/api/push`, `/api/create`, `/api/delete`, `/api/copy`, `/api/embed`, `/v1/models`, `/docs`, `/metrics`, `/debug`, `/health`, `/status`
### ๐ฆ MODEL OPERATIONS
```bash
# List models with details
./launcher.sh models --target 1.2.3.4:11434
# Pull model info/config
./launcher.sh models --pull 1.2.3.4:11434 llama3.2
# Deep analyze a model
./launcher.sh models --analyze 1.2.3.4:11434 llama3.2
```
### ๐ EXPORT
```bash
./launcher.sh export --format html # Beautiful HTML report with geo & vuln stats
./launcher.sh export --format csv # CSV for analysis
./launcher.sh export --format json # Raw JSON
./launcher.sh export --format all # All formats
```
### ๐ค AUTO-PWN (One Command)
```bash
# Scan โ Vuln Scan โ Geolocate โ Proxy โ Report
./launcher.sh autopwn --random 5000
```
### ๐ก MONITOR DAEMON
```bash
# Continuous scanning (CLI only, no web)
./launcher.sh monitor --interval 3600 --random 5000 --notify --export html
```
### โ๏ธ CONFIGURATION
```bash
./launcher.sh config --show # Show config
./launcher.sh config --telegram-token "BOT_TOKEN" # Telegram alerts
./launcher.sh config --telegram-chat "CHAT_ID"
./launcher.sh config --shodan-key "API_KEY"
./launcher.sh config --set scan_timeout 3 # Custom setting
```
---
## ๐ SAMPLE OUTPUT
```
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
โ ๐ฆ EVIL-OLLAMA v3.0 โ
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
[12:30:01] [โถ STEP ] Step 1/4: Scanning 5000 random IPs...
[12:30:01] [๐ฏ INFO] Scanning 5000 hosts on port 11434 (concurrency: 1000)
[โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ] 45% | 2250/5000 | 850/s | Found: 12 | ETA: 3.2s
[12:30:07] [๐ฆ FOUND] 203.0.113.42:11434 | v0.1.32 | llama3.2, mistral, codellama
[12:30:07] [๐ฆ FOUND] 198.51.100.73:11434 | v0.3.0 | llama3.1, nomic-embed-text
[...]
[12:30:10] [โถ STEP ] Step 2/4: Geolocating...
[12:30:10] [๐ GEO ] 203.0.113.42 โ San Francisco, US | DigitalOcean
[12:30:11] [๐ GEO ] 198.51.100.73 โ London, UK | Hetzner
[12:30:11] [โถ STEP ] Step 3/4: Vulnerability scanning...
[12:30:11] [๐ด VULN] 203.0.113.42:11434
๐ [HIGH ] No Authentication Required
๐ [CRITICAL] Potential RCE via Crafted Model Import (CVE-2024-37032)
๐ [HIGH ] Unauthenticated Model Creation
[12:30:14] [โถ STEP ] Step 4/4: Generating report...
[12:30:14] [๐ OK ] HTML report saved: nova_report.html (45.2 KB)
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
โ ๐ AUTO-PWN COMPLETE โ
โ Instances found: 7 โ
โ Total models: 23 โ
โ Vulnerabilities: 12 โ
โ CVEs detected: 5 โ
โ Report: nova_report.html โ
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
[12:30:15] [๐ PROXY] Proxy โ 127.0.0.1:9090 โ 203.0.113.42:11434
```
---
## ๐ก๏ธ CVE DATABASE
| CVE ID | Severity | CVSS | Description | Affected Versions |
|--------|----------|------|-------------|-------------------|
| CVE-2024-37032 | **CRITICAL** | 9.1 | RCE via crafted model file (path traversal) | < 0.1.47 |
| CVE-2024-39720 | **HIGH** | 7.5 | Prompt injection via crafted system prompt | < 0.1.34 |
| CVE-2024-39721 | **HIGH** | 7.5 | SSRF in model pulling mechanism | < 0.1.34 |
| CVE-2024-39722 | **HIGH** | 7.3 | Path traversal in API endpoints | < 0.1.34 |
| CVE-2025-23104 | **HIGH** | 8.2 | API authentication bypass in /api/pull | < 0.3.0 |
---
## ๐ REQUIREMENTS
```
pip install aiohttp flask requests
```
---
## โ ๏ธ LEGAL DISCLAIMER
```
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
โ โ
โ This tool is for AUTHORIZED SECURITY TESTING only. โ
โ โ
โ Only use on systems you own or have explicit written permission โ
โ to test. Unauthorized scanning or exploitation is ILLEGAL. โ
โ โ
โ The authors assume no liability for misuse. โ
โ โ
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
```
---
```
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
โ EVIL-OLLAMA v3.0 ยท https://github.com/evogix/Evil-Ollama โ
โ For authorized security research & bug bounty purposes only โ
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
```