WebTitan Cloud Panel - Detect

WebTitan Cloud is a cloud-based web filtering solution that monitors, controls, and protects users and businesses online. It blocks malware, phishing, viruses, ransomware, and malicious sites. !/usr/bin/env python3 -- coding: utf-8 -- """WebTitan Cloud is a cloud-based web filtering solution that...

Hack5 Cloud C2 - Detect

Cloud C² is a self-hosted web-based command and control suite for networked Hak5 gear that lets you pentest from anywhere. Linux, Mac and Windows computers can host the Cloud C² server while Hak5 gear such as the WiFi Pineapple, LAN Turtle and Packet Squirrel can be provisioned as clients...

HCM Cloud - Arbitrary File Read Detection

HCM-Cloud professional human resources platform in the cloud download Arbitrary file read vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """HCM-Cloud professional human resources platform in the cloud download Arbitrary file read vulnerability.""" import re from kittysploit import from...

IBM Cloud Object Storage - Bucket Exposure Detection

IBM Cloud Object Storage bucket is publicly accessible, potentially exposing sensitive files and data. Public bucket listing allows enumeration of stored objects. !/usr/bin/env python3 -- coding: utf-8 -- """IBM Cloud Object Storage bucket is publicly accessible, potentially exposing sensitive...

Ivanti EPM Cloud Services Appliance Code Injection Detection

Ivanti EPM Cloud Services Appliance CSA before version 4.6.0-512 is susceptible to a code injection vulnerability because it allows an unauthenticated user to execute arbitrary code with limited permissions nobody. !/usr/bin/env python3 -- coding: utf-8 -- """Ivanti EPM Cloud Services Appliance C...

EJBCA Enterprise Cloud Configuration Wizard - Exposure Detection

Detects exposed EJBCA Enterprise Cloud Installation page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed EJBCA Enterprise Cloud Installation page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'EJBCA...

Firebase Storage Public Listing

Probe Firebase Storage REST /v0/b/bucket/o for anonymous object listing common misconfig when rules are open. !/usr/bin/env python3 -- coding: utf-8 -- """Detect publicly listable Firebase Storage / GCS buckets.""" import re from urllib.parse import quote from kittysploit import from...

Google Cloud Default Config - Detect

Google Cloud default configuration was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Google Cloud default configuration was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Google Cloud Default Conf...

Google Cloud Storage - Public Bucket Listing Detection

Detected Google Cloud Storage bucket was publicly accessible and allows listing of objects, potentially exposing sensitive files. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Google Cloud Storage bucket was publicly accessible and allows listing of objects, potentially exposi.""" from...

Elastic Cloud API Key Detection

Detects Elastic Cloud API keys used for programmatic access to the Elastic Cloud and serverless APIs. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Elastic Cloud API keys used for programmatic access to the Elastic Cloud and serverless APIs.""" import re from kittysploit import from...

Firebase Cloud Messaging - Server Key Disclosure Detection

Detected Firebase Cloud Messaging FCM legacy server keys were identified in client-side files. These keys can be used to send push notifications to any device. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Firebase Cloud Messaging FCM legacy server keys were identified in client-side...

Spring Cloud Config - Local File Inclusion Detection

Spring Cloud Config versions 2.2.x prior to 2.2.2, 2.1.x prior to 2.1.7, and older unsupported versions are vulnerable to local file inclusion because they allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. !/usr/bin/env python3 -- coding: utf...

Spring Cloud Config Server - Local File Inclusion Detection

Spring Cloud Config Server versions 2.1.x prior to 2.1.2, 2.0.x prior to 2.0.4, 1.4.x prior to 1.4.6, and older unsupported versions are vulnerable to local file inclusion because they allow applications to serve arbitrary configuration files. An attacker can send a request using a specially...

Spring Cloud Config Server - Local File Inclusion Detection

Spring Cloud Config Server versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user or attacker can send a request using a specially crafte...

Wordpress Aspose Cloud eBook Generator - Local File Inclusion Detection

Wordpress Aspose Cloud eBook Generator is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Wordpress Aspose Cloud eBook Generator is vulnerable to local file inclusion.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Alibaba Cloud OSS Bucket - Public Listing Enabled Detection

Alibaba Cloud Object Storage Service OSS bucket is publicly accessible and allows anonymous listing of objects. This misconfiguration can expose sensitive data, lead to data breaches, and result in unexpected charges on the Alibaba Cloud bill. !/usr/bin/env python3 -- coding: utf-8 -- """Alibaba...

Aviatrix Cloud Controller Panel Detection

An Aviatrix Cloud Controller login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An Aviatrix Cloud Controller login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Aviatrix Clou...

Apache Ozone - Detect

Detects a Apache Ozone web application, a scalable, redundant, and distributed object store for Hadoop and Cloud-native environments. !/usr/bin/env python3 -- coding: utf-8 -- """Detects a Apache Ozone web application, a scalable, redundant, and distributed object store for Hadoop and Clo.""" fro...

Cisco Meraki Cloud Security Appliance Panel - Detect

Cisco Meraki Cloud Security Appliance panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Cisco Meraki Cloud Security Appliance panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cisco...

ContentKeeper Cloud Panel - Detect

ContentKeeper Cloud panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ContentKeeper Cloud panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ContentKeeper Cloud Panel - Detect',...