Python
4 stars
AI-RECON is a specialized reconnaissance tool designed to identify, fingerprint, and enumerate AI/ML infrastructure. It goes beyond traditional scanners by detecting model-serving frameworks, vector databases, and LLM runtimes, mapping their exposed APIs, metadata, and potential vulnerabilities to reveal the full AI attack surface.
Overview: AI-RECON is a specialized reconnaissance tool designed to identify, fingerprint, and enumerate AI/ML infrastructure, going beyond traditional scanners by detecting model-serving frameworks, vector databases, and LLM runtimes.
Key features:
- Port-agnostic HTTP/HTTPS fingerprinting
- More scan coverage with smart, common, all-TCP-port, and explicit port profiles
- Non-HTTP protocol fingerprints for SSH, FTP, MySQL, Redis, PostgreSQL, TLS, and HTTP/2
- Expanded AI/ML discovery signatures for model-serving APIs, OpenAI-compatible endpoints, local-model runtimes, model registries, vector stores, notebooks, metrics, workflow interfaces, and selected AI web UIs
- Opt-in metadata enumeration for read-oriented service API queries
- Safer transport handling with certificate verification enabled by default
- More cautious exposure flags with no claims of exploitability or vulnerability presence
Tech stack: Python
Why it matters: AI-RECON is designed to complement traditional port scanning tools by providing a more comprehensive and evidence-driven approach to identifying and enumerating AI/ML infrastructure, including services that may not be reachable through conventional ports.
Repository: giriaryan694-a11y/ai-recon
GitHub stars: 4