Host Header Injection Detection

HTTP header injection is a general class of web application security vulnerability which occurs when Hypertext Transfer Protocol headers are dynamically generated based on user input. !/usr/bin/env python3 -- coding: utf-8 -- """HTTP header injection is a general class of web application security...

Starlette - Improper Validation of Unsafe Equivalence in Input Detection

A flaw was found in Starlette, a lightweight ASGI Asynchronous Server Gateway Interface framework. A remote attacker could exploit this vulnerability by sending a specially crafted HTTP Host request header. This malformed header could cause the request.url to be incorrectly reconstructed, leading...

XSS-Protection Header - Cross-Site Scripting Detection

Setting the XSS-Protection header is deprecated. Setting the header to anything other than 0 can actually introduce an XSS vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """Setting the XSS-Protection header is deprecated.""" import re from kittysploit import from...

X-Backend-Server Header - Exposure Detection

Detected that the website returned the X-Backend-Server header, which included potentially internal or hidden IP addresses or hostnames. By exposing these values, attackers might have attempted to circumvent security proxies and access these hosts directly. !/usr/bin/env python3 -- coding: utf-8 ...

X-Recruiting Header Detection

Websites that advertise jobs via HTTP headers !/usr/bin/env python3 -- coding: utf-8 -- """Websites that advertise jobs via HTTP headers.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'X-Recruiting Header Detection'...

Seagate NAS OS 4.3.15.1 - Open Redirect Detection

Seagate NAS OS 4.3.15.1 contains an open redirect vulnerability in echo-server.html, which can allow an attacker to disclose information in the referer header via the state URL parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Seagate NAS OS 4.""" import re from kittysploit import from...

ZZcms - Cross-Site Scripting Detection

ZZcms 2019 contains a cross-site scripting vulnerability in the user login page. An attacker can inject arbitrary JavaScript code in the referer header via user/login.php, which can allow theft of cookie-based credentials and launch of subsequent attacks. !/usr/bin/env python3 -- coding: utf-8 --...

Intel Active Management Technology Server Detection

Detected Intel Active Management Technology AMT web interfaces by identifying the Server header in HTTP responses. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Intel Active Management Technology AMT web interfaces by identifying the Server header in HTTP resp.""" from kittysploit import...

Ipswitch IMail Server - Detect

Detects servers running Ipswitch IMail by identifying the Server header in HTTP responses. !/usr/bin/env python3 -- coding: utf-8 -- """Detects servers running Ipswitch IMail by identifying the Server header in HTTP responses.""" from kittysploit import from lib.protocols.http.httpclient import...

Lighttpd Web Server - Detect

Detected servers running the Lighttpd web server by identifying the Server header in HTTP responses. !/usr/bin/env python3 -- coding: utf-8 -- """Detected servers running the Lighttpd web server by identifying the Server header in HTTP responses.""" from kittysploit import from...

Zimbra Collaboration - Cross-Site Scripting (XSS) Detection

An issue was discovered in Zimbra Collaboration ZCS 9.0 and 10.0. A Cross-Site Scripting XSS vulnerability exists in the CalendarInvite feature of the Zimbra webmail classic user interface, because of improper input validation in the handling of the calendar header. An attacker can exploit this v...

Deprecated Feature-Policy Header - Detection

Detected the presence of the deprecated Feature-Policy HTTP response header. The Feature-Policy header has been deprecated and replaced by the Permissions-Policy header. While Feature-Policy is still supported in some browsers for backward compatibility, it is recommended to migrate to...

CherryPy Web Server - Detect

Detects servers running the CherryPy web server by identifying the Server header in HTTP responses. !/usr/bin/env python3 -- coding: utf-8 -- """Detects servers running the CherryPy web server by identifying the Server header in HTTP responses.""" from kittysploit import from...

Onion Website Supported via Onion-Location Header Detection

Identified websites that supported Tor network access through the Onion-Location HTTP response header, which pointed to a corresponding .onion service for enhanced privacy and anonymity. !/usr/bin/env python3 -- coding: utf-8 -- """Identified websites that supported Tor network access through the...

Microsoft IIS version detect

Some Microsoft IIS servers have the version on the response header. Useful when you need to find specific CVEs on your targets. !/usr/bin/env python3 -- coding: utf-8 -- """Some Microsoft IIS servers have the version on the response header.""" from kittysploit import from...

MiniUPnPd - Detect

Detected servers using the MiniUPnPd service through the Server header. !/usr/bin/env python3 -- coding: utf-8 -- """Detected servers using the MiniUPnPd service through the Server header.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanne...

Nginx version detect

Some nginx servers have the version on the response header. Useful when you need to find specific CVEs on your targets. !/usr/bin/env python3 -- coding: utf-8 -- """Some nginx servers have the version on the response header.""" import re from kittysploit import from lib.protocols.http.httpclient...

OpenVPN Host Header Injection Detection

A vulnerability in OpenVPN Access Server allows remote attackers to inject arbitrary redirection URLs by using the 'Host' HTTP header field. !/usr/bin/env python3 -- coding: utf-8 -- """A vulnerability in OpenVPN Access Server allows remote attackers to inject arbitrary redirection URLs by...

OpenConnect VPN Server (ocserv) - Detect

OpenConnect VPN Server ocserv is an open-source VPN server compatible with Cisco AnyConnect clients. It uses DTLS and TLS for secure connectivity and is commonly exposed on port 443 or 4443. The server header can expose OpenConnect or ocserv-specific markers. !/usr/bin/env python3 -- coding: utf-...

MochiWeb - Detect

Detected servers using the MochiWeb framework through the Server header. !/usr/bin/env python3 -- coding: utf-8 -- """Detected servers using the MochiWeb framework through the Server header.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...