WordPress DB Backup Detection

This template checks for exposed database in wordpress. !/usr/bin/env python3 -- coding: utf-8 -- """This template checks for exposed database in wordpress.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WordPress D...

Joomla! Database File List Detection

A Joomla! database directory /libraries/joomla/database/ was found exposed and has directory indexing enabled. !/usr/bin/env python3 -- coding: utf-8 -- """A Joomla! database directory /libraries/joomla/database/ was found exposed and has directory indexing enabled.""" from kittysploit import fro...

Kanboard - SQLite Database Exposure Detection

Detected Kanboard SQLite database file was found to be exposed, containing sensitive information including user credentials, project data, tasks, and comments. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Kanboard SQLite database file was found to be exposed, containing sensitive...

Milvus - Detect

Milvus was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Milvus was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Milvus - Detect', 'description': 'Milvus was detected.', 'author': 'KittySploit...

SQLite History - Exposure Detection

Detects exposed .sqlitehistory files. These files contain SQLite command history, including executed queries, table names, and potentially sensitive data that was queried or inserted. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed .""" import re from kittysploit import from...

Symfony Database Configuration File - Detect

Symfony database configuration file was detected and may contain database credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Symfony database configuration file was detected and may contain database credentials.""" from kittysploit import from lib.protocols.http.httpclient import Httpclien...

Odoo OpenERP Database Selector Panel - Detect

Odoo OpenERP database selector panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Odoo OpenERP database selector panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Odoo OpenERP Database...

PostgreSQL Credentials - Exposure Detection

Detects the exposure of PostgreSQL credentials and history files .pgpass via HTTP. These files may contain plaintext database usernames and passwords, and their leakage could allow unauthorized access to sensitive databases or internal infrastructure. !/usr/bin/env python3 -- coding: utf-8 --...

Exposed Prisma Database Schema - Exposure Detection

Prisma is a modern ORM extremely popular in the Node.js and TypeScript Next.js/Express ecosystems. Developers often accidentally expose the prisma/ folder in web directories during deployments or Docker builds. This template checks for the exposure of the schema.prisma file, which typically...

Ruby on Rails Database Configuration File - Detect

Ruby on Rails database configuration file was detected, which may contain database credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Ruby on Rails database configuration file was detected, which may contain database credentials.""" from kittysploit import from lib.protocols.http.httpclien...

Vehicle Parking Management System 1.0 - SQL Injection Detection

Vehicle Parking Management System 1.0 contains a SQL injection vulnerability via the password parameter. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. !/usr/bin/env python...

UFIDA U8 CRM cfillbacksetting.php - SQL Injection Detection

UFIDA U8-CRM system /config/fillbacksetting.php contains an SQL injection vulnerability, which allows attackers to manipulate the database through maliciously constructed SQL statements, resulting in data leaks, tampering or destruction, and seriously threatening system security. !/usr/bin/env...

OpenCart Error Log Disclosure Detection

Detected exposed OpenCart error log files that may contain sensitive information including file paths, database errors, PHP warnings, and internal application details. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed OpenCart error log files that may contain sensitive information...

Odoo - Database Manager Discovery Detection

Odoo database manager was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Odoo database manager was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Odoo - Database Manager Discovery Detection',...

Odoo - Unprotected Database Detection

The system has an Odoo application whose database manager is unprotected, indicating potential unauthorized access. !/usr/bin/env python3 -- coding: utf-8 -- """The system has an Odoo application whose database manager is unprotected, indicating potential unauthorized ac.""" from kittysploit impo...

Oqtane CMS Database - Detect

Detect which database distribution the target oqtane cms use. !/usr/bin/env python3 -- coding: utf-8 -- """Detect which database distribution the target oqtane cms use.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Oracle Database as a Service Detection

Detects Oracle Database as a Service. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Oracle Database as a Service.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Oracle Database as a Service Detection',...

PbootCMS 2.0.7 - SQL Injection Detection

PbootCMS 2.0.7 contains a SQL injection vulnerability via pbootcms.db. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. !/usr/bin/env python3 -- coding: utf-8 -- """PbootCMS...

qdPM 9.2 - DB Credentials Exposure Detection

qdPM 9.2 database credentials were discovered. !/usr/bin/env python3 -- coding: utf-8 -- """qdPM 9.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'qdPM 9.2 - DB Credentials Exposure Detection', 'description': 'qdPM...

OA E-Office mysql_config.ini - Information Disclosure Detection

E-Office mysqlconfig.ini file can be directly accessed, leaking database account password and other information !/usr/bin/env python3 -- coding: utf-8 -- """E-Office mysqlconfig.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info ...