Snaike: ProtectAI's Python AI red teaming toolsuite
MLflow: Platform for the machine learning lifecycle
CVE-2023-1177 is an LFI/RFI vulnerability in MLflow <2.2.3 exploitable with the MLFIflow tool. It allows an unauthenticated, remote attacker to read arbitrary files such as SSH and AWS keys as well as remote files. MLflow is vulnerable to this out of the box with any configuration and requires no prerequisite knowledge or user interaction. Additionally, because MLflow has no method of authorization or authetication, anyone with access to the server can download the models and artifacts of other users. DLflow exploits this by asynchronously downloading all artifacts from all users. CVE-2023-1177-scanner is a remote tool for scanning MLflow server for the vulnerability.
A tool for scanning MLflow servers for the LFI/RFI vulnerability CVE-2023-1177. See CVE-2023-1177-scanner/README.md for more information.
git clone https://github.com/protectai/Snaike-MLflow
cd Snaike-MLflow/CVE-2023-1177-scanner
python3 -m venv venv
source venv/bin/activate
pip install -r requirements.txt
python CVE-2023-1177-scanner.py -s http://1.2.3.4:5000A tool for exploiting MLflow servers vulnerable to the LFI/RFI vulnerability CVE-2023-1177. See MLFIflow/README.md for more information.
Hacking AI: System Takeover Exploit in MLflow
git clone https://github.com/protectai/Snaike-MLflow
cd Snaike-MLflow/MLFIflow
python3 -m venv venv
source venv/bin/activate
pip install -r requirements.txt
python MLFIflow.py -s http://1.2.3.4:5000This tool allows you to quickly download all files from a discovered MLflow server. MLflow has no method of authentication allowing anyone with access to the server to download all files. See DLflow/README.md for more information.
Hacking AI: Steal Models from MLflow, no Exploit Needed
git clone https://github.com/protectai/Snaike-MLflow
cd Snaike-MLflow/DLflow
python3 -m venv venv
source venv/bin/activate
pip install -r requirements.txt
python DLflow.py -s http://1.2.3.4:5000Pull requests are welcome. For major changes, please open an issue first to discuss what you would like to change.
Copyright 2023 ProtectAI
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.