Microsoft Exchange Server Pre-Auth POST Based Cross-Site Scripting Detection

Microsoft Exchange Server is vulnerable to a spoofing vulnerability. Be aware this CVE ID is unique from CVE-2021-42305. !/usr/bin/env python3 -- coding: utf-8 -- """Microsoft Exchange Server is vulnerable to a spoofing vulnerability.""" from kittysploit import from lib.protocols.http.httpclient...

PlaceOS 1.2109.1 - Open Redirection Detection

PlaceOS Authentication Service before 1.29.10.0 allows app/controllers/auth/sessionscontroller.rb open redirect. !/usr/bin/env python3 -- coding: utf-8 -- """PlaceOS Authentication Service before 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

strapi CMS <3.0.0-beta.17.5 - Admin Password Reset Detection

strapi CMS before 3.0.0-beta.17.5 allows admin password resets because it mishandles password resets within packages/strapi-admin/controllers/Auth.js and packages/strapi-plugin-users-permissions/controllers/Auth.js. !/usr/bin/env python3 -- coding: utf-8 -- """strapi CMS before 3.""" from...

DATAGERRY - REST API Auth Bypass Detection

Incorrect access control in BECN DATAGERRY v2.2 allows attackers to execute arbitrary commands via crafted web requests. !/usr/bin/env python3 -- coding: utf-8 -- """Incorrect access control in BECN DATAGERRY v2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...

Modular DS - Broken Access Control

Modular Connector login endpoint issues wordpressloggedin cookie without auth. !/usr/bin/env python3 -- coding: utf-8 -- """Modular DS - Broken Access Control""" import secrets from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Palo Alto Expedition - Admin Account Takeover Detection

Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. !/usr/bin/env python3 -- coding: utf-8 -- """Missing authentication for a critical function in Palo Alto Networks...

TRUfusion Enterprise <= 7.10.4.0 - Admin Contact Portal Detection

TRUfusion Enterprise versions 7.10.4.0 and earlier contained a vulnerability that allowed unauthenticated access to the Internal Admin Contact Page, resulting in the disclosure of PII including partner and contact names. !/usr/bin/env python3 -- coding: utf-8 -- """TRUfusion Enterprise versions...

Casdoor - Authorization Bypass Detection

Casdoor up to 1.811.0 contains an authorization bypass caused by manipulation in HandleScim function in controllers/scim.go, letting remote attackers bypass authorization, exploit requires remote access. !/usr/bin/env python3 -- coding: utf-8 -- """Casdoor up to 1.""" from kittysploit import from...

txAdmin Panel - Detect

txAdmin panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """txAdmin panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'txAdmin Panel - Detect', 'description': 'txAdmin panel was...

Unauthorized HP Printer Detection

HP Printer is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """HP Printer is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Unauthorized HP Printer Detection', 'description': 'HP Printer is exposed.',...

Sage X3 Login Panel - Detect

Sage X3 login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Sage X3 login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sage X3 Login Panel - Detect', 'description': 'Sage X3...

SonicWall Analyzer Login Panel - Detect

SonicWall Analyzer login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SonicWall Analyzer login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SonicWall Analyzer Login Panel -...

Discourse OAuth Social Login - Cross-site Scripting

Discourse ", for path in paths...

iSAMS Panel - Detect

iSAMS was detected. !/usr/bin/env python3 -- coding: utf-8 -- """iSAMS was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'iSAMS Panel - Detect', 'description': 'iSAMS was detected.', 'author': 'KittySploit...

Mailpit App - Information Disclosure Detection

Mailpit exposes the /api/v1/messages endpoint which can leak email metadata or full email content without authentication, leading to information disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Mailpit exposes the /api/v1/messages endpoint which can leak email metadata or full email conte...

Retool Login Panel - Detect

Retool login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Retool login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Retool Login Panel - Detect', 'description': 'Retool logi...

Shoppable Service Auth Token Detection

Detects Shoppable Service Auth Token. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Shoppable Service Auth Token.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Shoppable Service Auth Token Detection',...

Tabby Panel - Detect

Tabby panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Tabby panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tabby Panel - Detect', 'description': 'Tabby panel was discovered.'...

Basic Auth Detection

Detects Basic Auth Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Basic Auth Detection.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Basic Auth Detection', 'description': 'Detects Basic...

Agentejo Cockpit <0.12.0 - NoSQL Injection Detection

Agentejo Cockpit prior to 0.12.0 is vulnerable to NoSQL Injection via the newpassword method of the Auth controller, which is responsible for displaying the user password reset form. !/usr/bin/env python3 -- coding: utf-8 -- """Agentejo Cockpit prior to 0.""" import re from kittysploit import fro...