Skip to content

A tool that checks if a TorchServe instance is vulnerable to CVE-2023-43654

License

Notifications You must be signed in to change notification settings

OligoCyberSecurity/ShellTorchChecker

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

4 Commits
 
 
 
 
 
 
 
 

Repository files navigation

ShellTorch Logo

ShellTorch Checker Tool

This tool checks if a TorchServe instance is vulnerable to CVE-2023-43654 and provides possible ways for mitigation.

For more details please see our full report at https://www.oligo.security/blog/shelltorch-torchserve-ssrf-vulnerability-cve-2023-43654

To run the tool, execute the following command:

bash <(curl https://raw.githubusercontent.com/OligoCyberSecurity/ShellTorchChecker/main/ShellTorchChecker.sh) $TORCHSERVE_IP

Disclaimer

By using this tool, you acknowledge and agree that it is provided "as is" without
warranty of any kind, either express or implied. Oligo and any contributors shall not be held
liable for any direct, indirect, incidental, or consequential damages or false results arising
out of the use, misuse, or reliance on this tool.
You are solely responsible for understanding the output and implications of using this tool
and for any actions taken based on its findings.
Use at your own risk.

About

A tool that checks if a TorchServe instance is vulnerable to CVE-2023-43654

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages