Pi-hole Reflected XSS in 404-Error Page Detection

Pi-hole Admin Interface = 6.2.1 contains a reflected XSS vulnerability on the 404 error page. The URL path is reflected unsanitized into the class attribute of the body tag, allowing attribute injection via a crafted URL to execute arbitrary JavaScript in victim browsers. !/usr/bin/env python3 --...

Dynamicweb Login Panel - Detect

Dynamicweb login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Dynamicweb login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dynamicweb Login Panel - Detect', 'description':...

EkoAPI Admin Panel - Detect

EkoAPI Admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """EkoAPI Admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'EkoAPI Admin Panel - Detect', 'description': 'EkoAPI Admi...

Envoy Admin Exposure Detection

Envoy Admin page exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Envoy Admin page exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Envoy Admin Exposure Detection', 'description': 'Envoy Admin page...

WOOF WordPress plugin - Cross-Site Scripting Detection

The WOOF WordPress plugin does not sanitize or escape the woofredrawelements parameter before reflecting it back in an admin page, leading to a reflected cross-site scripting. !/usr/bin/env python3 -- coding: utf-8 -- """The WOOF WordPress plugin does not sanitize or escape the woofredrawelements...

WordPress HC Custom WP-Admin URL <=1.4 - Admin Login URL Disclosure Detection

The HC Custom WP-Admin URL WordPress plugin through 1.4 leaks the secret login URL when sending a specific crafted request !/usr/bin/env python3 -- coding: utf-8 -- """The HC Custom WP-Admin URL WordPress plugin through 1.""" import re from kittysploit import from lib.protocols.http.httpclient...

Atmail 6.5.0 - Cross-Site Scripting Detection

Atmail 6.5.0 contains a cross-site scripting vulnerability via the index.php/admin/index/ 'error' parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Atmail 6.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Atma...

Linear eMerge E3-Series - Information Disclosure Detection

Linear eMerge E3-Series devices are susceptible to information disclosure. Admin credentials are stored in clear text at the endpoint /test.txt in situations where the default admin credentials have been changed. An attacker can obtain admin credentials, access the admin dashboard, control buildi...

Jira Unauthenticated Admin Projects Detection

Detects Jira Unauthenticated Admin Projects. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Jira Unauthenticated Admin Projects.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Jira Unauthenticated Admin Projec...

Keycloak Admin Console Configuration Disclosure Detection

Detected Keycloak admin console configuration was exposing realm name, client ID, SSL requirements, and authentication server URL enabling reconnaissance and targeted authentication attacks. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Keycloak admin console configuration was exposing...

Keycloak Admin Login Panel - Detect

Keycloak admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Keycloak admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Keycloak Admin Login Panel - Detect',...

Kae's File Manager Admin Login Panel - Detect

Kae's File Manager admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Kae's File Manager admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': "Kae's File Manager...

Laravel Nova - Unauthenticated Admin Panel Access Detection

Laravel Nova admin panel is accessible without authentication. Nova provides full CRUD access to application models and database records, making unauthenticated access a critical security risk. !/usr/bin/env python3 -- coding: utf-8 -- """Laravel Nova admin panel is accessible without...

Lucee Web and Lucee Server Admin Login Panel - Detect

Lucee admin login panels were detected in both Web and Server tabs. !/usr/bin/env python3 -- coding: utf-8 -- """Lucee admin login panels were detected in both Web and Server tabs.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: inf...

MachForm Admin Panel - Detect

MachForm Admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """MachForm Admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MachForm Admin Panel - Detect', 'description':...

Magento Admin Login Panel - Detect

Magento admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Magento admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Magento Admin Login Panel - Detect',...

Monstra Admin Panel - Detect

Monstra admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Monstra admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Monstra Admin Panel - Detect', 'description': 'Monstra...

F5 Admin Interface - Detect

Detects F5 Admin Interfaces. !/usr/bin/env python3 -- coding: utf-8 -- """Detects F5 Admin Interfaces.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'F5 Admin Interface - Detect', 'description': 'Detects F5 Admin...

Filestash Admin Password Configuration Detection

Filestash is susceptible to the Admin Password Configuration page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Filestash is susceptible to the Admin Password Configuration page exposure due to misconfiguration.""" from kittysploit import from...

Flock Safety Camera Admin Panel - Detect

Detected the Flock Safety camera admin panel. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the Flock Safety camera admin panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Flock Safety Camera Admin Panel...