Cloud Config File Exposure Detection

Cloud Config file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Cloud Config file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cloud Config File Exposure Detection', 'description': 'Cloud...

Google Cloud Run Default Page Detection

Detects Google Cloud Run Default Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Google Cloud Run Default Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Google Cloud Run Default Page Detection',...

GCP/AWS Metadata Disclosure Detection

GCP/AWS Metadata is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """GCP/AWS Metadata is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GCP/AWS Metadata Disclosure Detection', 'description': 'GCP/AWS...

VMware Cloud Director Login Panel - Detect

VMware Cloud Director login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """VMware Cloud Director login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'VMware Cloud Director Login...

Google Api Private Key Detection

Google API private keys are exposed in files. !/usr/bin/env python3 -- coding: utf-8 -- """Google API private keys are exposed in files.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Google Api Private Key...

Hetzner Cloud Detect

Detects Hetzner Cloud Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Hetzner Cloud Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Hetzner Cloud Detect', 'description': 'Detects Hetzner Cloud...

CX Cloud Panel - Detect

CX Cloud panel was detected, !/usr/bin/env python3 -- coding: utf-8 -- """CX Cloud panel was detected,.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'CX Cloud Panel - Detect', 'description': 'CX Cloud panel was...

CX Cloud Unauthenticated Upload - Detect

CX Cloud unauthenticated upload was detected. !/usr/bin/env python3 -- coding: utf-8 -- """CX Cloud unauthenticated upload was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'CX Cloud Unauthenticated Upload...

Firestore Public REST Access

Probe Cloud Firestore REST /v1/projects/project/databases/default/documents for anonymous list access. Project ID can be set explicitly or scraped from the target HTML/JS. !/usr/bin/env python3 -- coding: utf-8 -- """Detect unauthenticated Firestore REST document listing.""" import re from...

Google Cloud Ignore File Exposure Detection

Detected exposed .gcloudignore files which may reveal directory structure,deployment configurations, and sensitive project information used by Google Cloud SDK gcloud during deployments. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed .""" from kittysploit import from...

Google Cloud Access Token Detection

Internal Google Cloud access tokens are exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Internal Google Cloud access tokens are exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Google Cloud Access Token...

Google Cloud Credentials Detection

Google Cloud Crdentials file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Google Cloud Crdentials file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Google Cloud Credentials Detection',...

Detect Kong

The Cloud-Native API Gateway !/usr/bin/env python3 -- coding: utf-8 -- """The Cloud-Native API Gateway.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect Kong', 'description': 'The Cloud-Native API Gateway',...

WD My Cloud Panel - Detect

Detects WD My Cloud Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects WD My Cloud Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WD My Cloud Panel - Detect', 'description': 'Detect...

Veeam Backup for Google Cloud Platform Panel - Detect

Veeam Backup for Google Cloud Platform panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Veeam Backup for Google Cloud Platform panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Veeam...

VMWare Cloud - Cross Site Scripting Detection

VMWare Cloud is vulnerable to Reflected Cross Site Scripting vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """VMWare Cloud is vulnerable to Reflected Cross Site Scripting vulnerability.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Yunanbao Cloud Box FastJson - Deserialization Remote Code Execution Detection

The authService interface of Cloud Box uses the vulnerable fastjson component. Unauthorized attackers can launch attacks on Cloud Box through the fastjson serialization vulnerability to obtain server permissions. !/usr/bin/env python3 -- coding: utf-8 -- """The authService interface of Cloud Box...

LANDESK(R) Cloud Services Appliance Detect

Detects LANDESKR Cloud Services Appliance Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects LANDESKR Cloud Services Appliance Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LANDESKR Cloud Services...

IR Trends Q2 2026: Phishing and weaponized remote management tools drive attack chains

Phishing was the primary means of gaining initial access this quarter, appearing in over half of all Cisco Talos Incident Response Talos IR engagements - an increase from approximately a third of engagements last quarter. Attackers continued to innovate their delivery methods to evade defenses,...

EUVD-2026-49727

Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attackers to invoke exposed MCP tools via network access to an MCP endpoint listening on all network interfaces by default...