Okta Detection

Detects Okta SSO tenants via OIDC metadata and login UI markers. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Okta identity cloud tenants.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.scanner.http.responsevalidation import parsejsonresponse class...

SharePoint Detection

Detects SharePoint REST API, layouts, and Microsoft 365 markers. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Microsoft SharePoint and SharePoint Online.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.scanner.http.responsevalidation import...

WinRM Authentication Enumeration

Probe WinRM /wsman and enumerate advertised authentication methods. !/usr/bin/env python3 -- coding: utf-8 -- """Enumerate WinRM authentication methods on ports 5985/5986.""" from future import annotations import json from kittysploit import from lib.protocols.tcp.tcpscannerclient import...

GitLab Detection

Detects GitLab login UI and version API exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detect exposed GitLab instances.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "GitLab Detection", "description": "Detec...

Generic Upload Webshell Probe

Probe generic file upload surfaces multipart POST for unrestricted extension handling and verify a harmless PHP/ASP execution marker. !/usr/bin/env python3 -- coding: utf-8 -- """ Generic multipart upload → webshell probe non-WordPress. Tests common upload endpoints and parameter names with a...

MQTT Broker Identify

Detect MQTT brokers and test anonymous subscribe access on TCP 1883. !/usr/bin/env python3 -- coding: utf-8 -- """Identify exposed MQTT brokers and anonymous access.""" from future import annotations import json from kittysploit import from lib.protocols.ics.icsscannerclient import Icsscannerclie...

SSL/TLS Cipher Suite Enumeration

Enumerate cipher suites accepted by a TLS endpoint and flag weak or deprecated protocol versions. !/usr/bin/env python3 -- coding: utf-8 -- """Enumerate accepted TLS cipher suites on a live service.""" from future import annotations import json import re from kittysploit import from...

SNMP Community Probe

Tests common SNMP v1/v2c communities and collects basic system information. !/usr/bin/env python3 -- coding: utf-8 -- """Probe SNMP communities and enumerate basic system information.""" from future import annotations import json from kittysploit import from lib.protocols.snmp.snmpclient import...

MSSQL Info - Detection

Detects MSSQL via TDS prelogin and reports version and encryption hints. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Microsoft SQL Server via TDS prelogin.""" from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient from lib.scanner.mssql.detectors import...

GPO Local Group Audit

Parse SYSVOL GPO files Groups.xml, GptTmpl.inf and detect trustees added to privileged local groups Administrators, RDP Users, etc.. !/usr/bin/env python3 -- coding: utf-8 -- """Audit privileged local group assignments configured via GPO on SYSVOL.""" from future import annotations import json fr...

GPO Registry Audit

Parse SYSVOL GPO registry settings Registry.xml, registry.pol and detect relay-friendly SMB/NTLM policies, autologon passwords, and stored credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Audit insecure registry settings configured via GPO on SYSVOL.""" from future import annotations...

GPP Password Hunter

Search SYSVOL Group Policy Preferences XML files for encrypted cpassword credentials via SMB. !/usr/bin/env python3 -- coding: utf-8 -- """Hunt Group Policy Preferences passwords on SMB SYSVOL.""" from future import annotations import json import os import tempfile from typing import Dict, List...

VLAN ID Scanner

Hop through 802.1Q VLAN IDs on a Layer-2 access port by sending tagged DHCP and ARP probes, optionally harvesting CDP native VLAN hints first. !/usr/bin/env python3 -- coding: utf-8 -- """Discover active VLAN IDs from an access port using tagged DHCP/ARP probes.""" from future import annotations...

Azure Functions Detection

Detects Azure Functions hosts and platform response headers. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Microsoft Azure Functions apps.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.scanner.http.responsevalidation import ishtmlresponse class...

GCP Cloud Run Detection

Detects Cloud Run hostnames and Google Frontend trace headers. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Google Cloud Run services.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.scanner.http.responsevalidation import ishtmlresponse class...

GPO Privilege Rights Audit

Parse SYSVOL GptTmpl.inf User Rights Assignment and detect trustees with dangerous privileges SeDebug, SeImpersonate, SeBackup, etc.. !/usr/bin/env python3 -- coding: utf-8 -- """Audit dangerous User Rights Assignment configured via GPO on SYSVOL.""" from future import annotations import json fro...

AD CS Misconfiguration Scanner

Detects ESC-style AD CS template and enrollment service misconfigurations via LDAP. !/usr/bin/env python3 -- coding: utf-8 -- """Detect vulnerable AD CS certificate templates and enrollment services.""" from kittysploit import from lib.protocols.ldap.adclient import Adclient, LDAP3AVAILABLE from...

VNC Service Detection

Detects VNC servers via RFB protocol version banner. !/usr/bin/env python3 -- coding: utf-8 -- """Detect VNC/RFB remote desktop services.""" from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient from lib.scanner.vnc.detectors import probevnc class ModuleScanner,...

Confluence Detection

Detects Confluence wiki UI and status endpoints. !/usr/bin/env python3 -- coding: utf-8 -- """Detect exposed Atlassian Confluence instances.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "Confluence Detection",...

ThinkPHP Detection

Detects ThinkPHP routing errors and framework markers without exploitation. !/usr/bin/env python3 -- coding: utf-8 -- """Detect ThinkPHP framework fingerprints safe passive probes.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from...