Dnsmasq Config - File Disclosure Detection

Dnsmasq Config file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Dnsmasq Config file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dnsmasq Config - File Disclosure Detection', 'description':...

rConfig 3.9.4 - SQL Injection Detection

rConfig 3.9.4 and previous versions have unauthenticated devices.inc.php SQL injection. Because nodes' passwords are stored in cleartext by default, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices. !/usr/bin/env python3 -- coding: utf-8 --...

Bitrix Site Manager - Log File Disclosure Detection

Detected Bitrix Site Manager log files, potentially exposing sensitive information including database credentials, file paths, SQL queries, and user session data. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Bitrix Site Manager log files, potentially exposing sensitive information...

Xeams Admin Console Login Panel - Detect

Xeams Admin Console login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Xeams Admin Console login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Xeams Admin Console Login Panel...

Django Config - Detect

Django configuration information was detected, which could reveal web application framework exceptions that could indicate exploitation attempts. !/usr/bin/env python3 -- coding: utf-8 -- """Django configuration information was detected, which could reveal web application framework exceptions tha...

XWiki < 4.10.20 - Remote code execution Detection

XWiki Platform is a generic wiki platform. Starting in version 2.4-milestone-1 and prior to versions 4.10.20, 15.5.4, and 15.10-rc-1, XWiki's database search allows remote code execution through the search text. This allows remote code execution for any visitor of a public wiki or user of a close...

ILIAS Login Panel - Detect

ILIAS login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ILIAS login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ILIAS Login Panel - Detect', 'description': 'ILIAS login...

Cornerstone OnDemand Panel - Detect

Cornerstone OnDemand panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Cornerstone OnDemand panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cornerstone OnDemand Panel - Detect',...

Gocron Panel - Detect

Gocron panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Gocron panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Gocron Panel - Detect', 'description': 'Gocron panel was...

Adobe ColdFusion - Cross-Site Scripting Detection

Adobe ColdFusion debug page contains a cross-site scripting vulnerability when the application is running on a remote host. An attacker can execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...

Mitel MiCollab Login Panel - Detect

Mitel MiCollab login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Mitel MiCollab login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Mitel MiCollab Login Panel - Detect',...

WWBN AVideo 11.6 - Cross-Site Scripting Detection

WWBN AVideo 11.6 contains a cross-site scripting vulnerability in the footer alerts functionality via the 'toast' parameter, which is inserted into the document with insufficient sanitization. !/usr/bin/env python3 -- coding: utf-8 -- """WWBN AVideo 11.""" from kittysploit import from...

CODESYS WebVisu - Panel Detection

CODESYS WebVisu is the web-based HMI Human-Machine Interface component of the CODESYS industrial automation runtime. It provides browser-based access to PLC visualizations and industrial control interfaces. Exposed instances may reveal real-time process data and control functions without...

Open Journal Systems Detect

Open Journal Systems, also known as OJS, is a free software for the management of peer-reviewed academic journals, created by the Public Knowledge Project. !/usr/bin/env python3 -- coding: utf-8 -- """Open Journal Systems, also known as OJS, is a free software for the management of peer-reviewed...

WordPress WPML Multilingual CMS < 4.6.1 - Cross-Site Scripting Detection

The WPML Multilingual CMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting XSS in versions prior to 4.6.1. The plugin does not escape some URL attributes before outputting them to a page, allowing attackers to inject malicious JavaScript which may be executed in the browser of...

GROWI Installer - Exposure Detection

Checks for the presence of a GROWI Installer. !/usr/bin/env python3 -- coding: utf-8 -- """Checks for the presence of a GROWI Installer.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GROWI Installer - Exposure...

SiYuan <= v3.6.1 - Path Traversal

Unauthenticated path traversal via /appearance/filepath reads conf.json. !/usr/bin/env python3 -- coding: utf-8 -- """SiYuan = v3.6.1 - Path Traversal""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "SiYuan = v3.6.1 -...

Ivanti(R) Cloud Services Appliance - Panel Detection

An Ivanti Cloud Services Appliance panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An Ivanti Cloud Services Appliance panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'IvantiR Cloud...

Dell EMC RecoverPoint Panel - Detect

Dell EMC RecoverPoint management panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Dell EMC RecoverPoint management panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dell EMC...

Prometheus exporter detect

Prometheus exporter detector !/usr/bin/env python3 -- coding: utf-8 -- """Prometheus exporter detector.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Prometheus exporter detect', 'description': 'Prometheus exporter...