DomPDF - Configuration Page Detection

DOMPDF Configuration page was detected, which contains paths, library versions and other potentially sensitive information !/usr/bin/env python3 -- coding: utf-8 -- """DOMPDF Configuration page was detected, which contains paths, library versions and other potentially sensitive.""" from kittysplo...

Versa Director API Endpoint Detection

Versa Director API Endpoint Unauthorized Detection !/usr/bin/env python3 -- coding: utf-8 -- """Versa Director API Endpoint Unauthorized Detection.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Versa...

Spring Boot Information Panel - Detect

Spring Boot information panel displaying app name, version information, and other values was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Spring Boot information panel displaying app name, version information, and other values was detected.""" from kittysploit import from...

Dgraph Ratel Dashboard Exposure Panel - Detect

Dgraph Ratel Dashboard Exposure panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Dgraph Ratel Dashboard Exposure panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dgraph Ratel...

Pair Drop Panel - Detect

Local file sharing in your browser. Inspired by Apple's AirDrop. Fork of Snapdrop. !/usr/bin/env python3 -- coding: utf-8 -- """Local file sharing in your browser.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pair...

Matrix Server Detect

Detects Matrix servers based on .well-known entries. See https://en.wikipedia.org/wiki/Matrixprotocol !/usr/bin/env python3 -- coding: utf-8 -- """Detects Matrix servers based on .""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Subrion CMS Detect

Detects Subrion CMS Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Subrion CMS Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Subrion CMS Detect', 'description': 'Detects Subrion CMS Detect.',...

Svnserve Configuration File - Detect

Svnserve configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Svnserve configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Svnserve Configuration File - Detect',...

Fuji Xerox ApeosPort - Default Login Detection

This template checks for the default credentials username: 11111, password: x-admin on Fuji Xerox ApeosPort series printers. If the credentials are valid, the response will have a 200 HTTP status code. Tested on a Fuji Xerox ApeosPort-V C2275 T2. !/usr/bin/env python3 -- coding: utf-8 -- """This...

JetBrains WebServers File - Detect

JetBrains webservers file was detected. The file contains webserver credentials with encoded passwords. !/usr/bin/env python3 -- coding: utf-8 -- """JetBrains webservers file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

GEMweb Plus 500 Login Panel - Detect

GEMweb Plus 500 login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """GEMweb Plus 500 login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GEMweb Plus 500 Login Panel - Detect',...

Pyramid Debug Toolbar Detection

Pyramid Debug Toolbar provides a debug toolbar useful while you are developing your Pyramid application. !/usr/bin/env python3 -- coding: utf-8 -- """Pyramid Debug Toolbar provides a debug toolbar useful while you are developing your Pyramid application.""" from kittysploit import from...

AEM MergeMetadataServlet Detection

Detects AEM MergeMetadataServlet. !/usr/bin/env python3 -- coding: utf-8 -- """Detects AEM MergeMetadataServlet.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AEM MergeMetadataServlet Detection', 'description':...

StrongShop Installer - Exposure Detection

Detects the exposure of the StrongShop installer page, which could allow unauthorized setup or reinstallation of the application. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the exposure of the StrongShop installer page, which could allow unauthorized setup or reinstallation .""" from...

OpenCPU - Remote Code Execution Detection

Check for remote code execution via OpenCPU was conducted. !/usr/bin/env python3 -- coding: utf-8 -- """Check for remote code execution via OpenCPU was conducted.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OpenC...

LaunchDarkly - Detect

Detects the presence of LaunchDarkly, a feature management and feature flag platform. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of LaunchDarkly, a feature management and feature flag platform.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

WordPress Simple Membership <4.1.1 - Cross-Site Scripting Detection

WordPress Simple Membership plugin before 4.1.1 contains a reflected cross-site scripting vulnerability. It does not properly sanitize and escape parameters before outputting them back in AJAX actions. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Simple Membership plugin before 4.""" fr...

AdGuard Home Panel Detection

Detects AdGuard Home management panels. !/usr/bin/env python3 -- coding: utf-8 -- """Detect AdGuard Home panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "AdGuard Home Panel Detection", "description": "Detects...

Blue Ocean Excellence - Local File Inclusion Detection

Blue Ocean Excellence is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Blue Ocean Excellence is vulnerable to local file inclusion.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

WordPress Securimage-WP 3.2.4 - Cross-Site Scripting Detection

WordPress Securimage-WP 3.2.4 plugin contains a cross-site scripting vulnerability via siwptest.php. An attacker can execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials an...