该工具用于检查 TorchServe 实例是否存在 CVE-2023-43654 漏洞,并提供可能的缓解方法。
更多详情请参阅我们的完整报告:https://www.oligo.security/blog/shelltorch-torchserve-ssrf-vulnerability-cve-2023-43654
要运行该工具,请执行以下命令:
bash <(curl https://raw.githubusercontent.com/OligoCyberSecurity/ShellTorchChecker/main/ShellTorchChecker.sh) $TORCHSERVE_IP
By using this tool, you acknowledge and agree that it is provided "as is" without
warranty of any kind, either express or implied. Oligo and any contributors shall not be held
liable for any direct, indirect, incidental, or consequential damages or false results arising
out of the use, misuse, or reliance on this tool.
You are solely responsible for understanding the output and implications of using this tool
and for any actions taken based on its findings.
Use at your own risk.