KodeExplorer 4.51 - Reflective Cross Site Scripting (XSS) Detection

Reflective Cross Site Scripting XSS vulnerability in KodExplorer version 4.51, allows attackers to obtain sensitive information and escalate privileges via the APPHOST parameter at config/i18n/en/main.php. !/usr/bin/env python3 -- coding: utf-8 -- """Reflective Cross Site Scripting XSS...

pyLoad Flask Config - Access Control Detection

pyLoad is the free and open-source Download Manager written in pure Python. Any unauthenticated user can browse to a specific URL to expose the Flask config, including the SECRETKEY variable. This issue has been patched in version 0.5.0b3.dev77. !/usr/bin/env python3 -- coding: utf-8 -- """pyLoad...

Karma Configuration File - Detect

Karma configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Karma configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Karma Configuration File - Detect',...

Web Configuration File - Detect

Web configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Web configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Web Configuration File - Detect', 'description':...

Symfony Security Configuration File - Detect

Symfony security configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Symfony security configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Symfony Security...

Tox Configuration File - Detect

Tox configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Tox configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tox Configuration File - Detect', 'description':...

SaltStack Config Panel - Detect

SaltStack config panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SaltStack config panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SaltStack Config Panel - Detect', 'description':...

Rackup Configuration - Detect

Rackup configuration information was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Rackup configuration information was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Rackup Configuration - Detect...

Ruijie Phpinfo Configuration - Detect

Ruijie phpinfo configuration was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ruijie phpinfo configuration was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ruijie Phpinfo Configuration - Detect...

S3CMD Configuration - Detect

S3CMD configuration information was detected. !/usr/bin/env python3 -- coding: utf-8 -- """S3CMD configuration information was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'S3CMD Configuration - Detect',...

Sensitive Storage Data - Detect

A generic search for 'storage' in sensitive key files, file names, logs, etc., returned a match. !/usr/bin/env python3 -- coding: utf-8 -- """A generic search for 'storage' in sensitive key files, file names, logs, etc.""" from kittysploit import from lib.protocols.http.httpclient import Httpclie...

Appspec YML/YAML - Detect

Appspec YML and YAML files are susceptible to information disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Appspec YML and YAML files are susceptible to information disclosure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

ASP.NET Launch Settings - Exposure Detection

Detected exposed launchSettings.json files in ASP.NET Core applications. This file contains environment variables and launch configurations that may leak sensitive information. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed launchSettings.""" from kittysploit import from...

librechat - Config Exposure Detection

Detected the /api/config endpoint of the LibreChat web application was publicly accessible, potentially exposing internal configuration details. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the /api/config endpoint of the LibreChat web application was publicly accessible, potentially...

HTaccess config file Detection

Detects HTaccess config file. !/usr/bin/env python3 -- coding: utf-8 -- """Detects HTaccess config file.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HTaccess config file Detection', 'description': 'Detects HTacce...

Github pages config file Detection

Find github pages config file. !/usr/bin/env python3 -- coding: utf-8 -- """Find github pages config file.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Github pages config file Detection', 'description': 'Find...

Jetbrains IDE DataSources Config - Detect

Jetbrains IDE DataSources configuration information was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Jetbrains IDE DataSources configuration information was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Php User.ini Disclosure Detection

PHP user.ini file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """PHP user.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Php User.ini Disclosure Detection', 'description': 'PHP user.ini file is exposed.',...

D-Link DCS - Unauth Credential Disclosure Detection (CVE-2020-25078)

Detects CVE-2020-25078 by requesting /config/getuser?index=0 and looking for name=/pass= credential lines without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DCS IP camera credential disclosure via /config/getuser CVE-2020-25078.""" import re from kittysploit import from...

Spring Cloud Config Server - Local File Inclusion Detection

Spring Cloud Config Server versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user or attacker can send a request using a specially crafte...