SonicWall Analytics - Login Panel Detection

SonicWall Analytics formerly SGMS is SonicWall's centralised network security analytics and reporting platform used to aggregate and visualise threat data across SonicWall firewall deployments. !/usr/bin/env python3 -- coding: utf-8 -- """SonicWall Analytics formerly SGMS is SonicWall's centralis...

WordPress Google Analytics - Full Path Disclosure Detection

Detected WordPress Google Analytics Dashboard Plugin for WordPress by MonsterInsights, potentially revealing analytics data, file paths, and errors. !/usr/bin/env python3 -- coding: utf-8 -- """Detected WordPress Google Analytics Dashboard Plugin for WordPress by MonsterInsights, potentially...

Ackee Panel Detection

Detects Ackee self-hosted analytics login panels. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Ackee analytics panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "Ackee Panel Detection", "description":...

Acrolinx Dashboard Detection

An Acrolinx Analytics dashboard was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An Acrolinx Analytics dashboard was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Acrolinx Dashboard Detection',...

ZOHO ManageEngine Analytics Plus Panel - Detect

ZOHO ManageEngine analytics plus panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ZOHO ManageEngine analytics plus panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ZOHO ManageEngine...

Matomo (Piwik) RUM - Tech Detect

Detects Matomo formerly Piwik Web Analytics & RUM artifacts. Identifies Standard Tracking, Image Tracking, Tag Manager, and Cloud instances using strict matching. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Matomo formerly Piwik Web Analytics & RUM artifacts.""" import re from kittysploi...

Analytics Insights for Google Analytics 4 < 6.3 - Open Redirect Detection

The plugin is vulnerable to Open Redirect due to insufficient validation on the redirect oauth2callback.php file. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action. !/usr/bin/env...

Davantis Video Analytics Panel - Detect

Davantis Video Analytics panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Davantis Video Analytics panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Davantis Video Analytics Panel -...

Piwik/Matomo - Unauthenticated Access Detection

Detected Piwik/Matomo instances exposing analytics data without authentication. When anonymous access was enabled, the API returned visitor statistics, page views, and other sensitive analytics data using the anonymous token. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Piwik/Matomo...

Mixpanel Analytics - Detect

Detected the presence of Mixpanel, a business analytics service. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the presence of Mixpanel, a business analytics service.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Open Web Analytics Login - Detect

Detects the presence of Open Web Analytics login page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of Open Web Analytics login page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Open Web...

Hitachi Pentaho Business Analytics Server - Bypass Authorization Detection

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x contain security restrictions using non-canonical URLs which can be circumvented. !/usr/bin/env python3 -- coding: utf-8 -- """Hitachi Vantara Pentaho Business Analytics Server versions before...

Open Web Analytics Installer - Exposure Detection

Open Web Analytics is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Open Web Analytics is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient impo...

BIT-KIBANA-2026-42397 Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user can submit a specially crafted request to affected Entity Analytics endpoints containing an oversized input value that causes excessive...

BIT-ELK-2026-42397 Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user can submit a specially crafted request to affected Entity Analytics endpoints containing an oversized input value that causes excessive...

Kibana 9.3.x < 9.3.7 / 9.4.x < 9.4.4 DoS (ESA-2026-55)

The version of Kibana installed on the remote host is 9.3.x prior to 9.3.7 or 9.4.x prior to 9.4.4. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-55 advisory. - Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via...

Malicious Package

Overview wallet-analytics is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview bigops-web-analytics is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview lakk-analytics is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

irflow-timeline v1.0.9

IRFlow Timeline Native macOS forensic timeline analysis. Import, search, and investigate EVTX, CSV, XLSX, Plaso, $MFT, $J, and local AI assistant artifacts — with AI Secret Hunt and the analytics DFIR professionals actually need. Built on Electron + SQLite to handle millions of rows without...