Schneider Electric ClearSCADA - Panel Detection

ClearSCADA now branded as EcoStruxure Geo SCADA Expert is a Schneider Electric SCADA platform used in water, oil and gas, and utilities sectors. Exposed instances may provide unauthenticated access to industrial process data and control interfaces. !/usr/bin/env python3 -- coding: utf-8 --...

LaRecipe < 2.8.1 Remote Code Execution via SSTI

LaRecipe docs endpoint evaluates Blade/SSTI in query string leading to RCE. !/usr/bin/env python3 -- coding: utf-8 -- """LaRecipe 2.8.1 Remote Code Execution via SSTI""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name":...

Tasmota Installer Exposure Detection

Tasmota is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Tasmota is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

BeyondTrust Remote Support Panel - Detect

Detect BeyondTrust Remote Support Panel. !/usr/bin/env python3 -- coding: utf-8 -- """Detect BeyondTrust Remote Support Panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'BeyondTrust Remote Support Panel - Detect...

DotNetNuke 9.2 - 9.2.1 - Weak Encryption & Cookie Deserialization Detection

DNN DotNetNuke versions 9.2 through 9.2.1 use a weak encryption algorithm to protect input parameters. This cryptographic weakness enables attackers to craft malicious DNNPersonalization cookies that can be deserialized, leading to remote code execution. !/usr/bin/env python3 -- coding: utf-8 --...

Oracle E-Business Suite 12.1.3/12.2.x - Open Redirect Detection

The Oracle Applications Framework component of Oracle E-Business Suite subcomponent: Popup windows lists of values, datepicker, etc. is impacted by open redirect issues in versions 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. These easily exploitable vulnerabilities allow unauthenticated attackers...

Metaflow UI Panel - Detect

Metaflow is an open-source ML platform created by Netflix for building and managing real-life data science projects. The Metaflow UI provides a web interface for monitoring and managing Metaflow runs and flows. !/usr/bin/env python3 -- coding: utf-8 -- """Metaflow is an open-source ML platform...

GlobalSCAPE Secure FTP Service - Detect

GlobalSCAPE Secure FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """GlobalSCAPE Secure FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name':...

Elastic HD Dashboard Exposure Detection

Elastic HD Dashboard is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Elastic HD Dashboard is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Elastic HD Dashboard Exposure Detection', 'description':...

ITFlow Unfinished Installation Detection

Detected ITFlow setup wizard was exposed with an unfinished installation, allowing attackers to configure the database and create an admin account. !/usr/bin/env python3 -- coding: utf-8 -- """Detected ITFlow setup wizard was exposed with an unfinished installation, allowing attackers to configur...

aaPanel Detection

Detects aaPanel Linux management panel login interface. !/usr/bin/env python3 -- coding: utf-8 -- """Detect aaPanel Linux management panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "aaPanel Detection",...

MPSec ISG1000 - Local File Inclusion Detection

MPSec ISG1000 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """MPSec ISG1000 is vulnerable to local file inclusion.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MPSec...

LMSZAI Installer Exposure Detection

LMSZAI is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """LMSZAI is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Agentejo Cockpit < 0.11.2 - NoSQL Injection Detection

Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php check function. The $eq operator matches documents where the value of a field equals the specified value. !/usr/bin/env python3 -- coding: utf-8 -- """Agentejo Cockpit before 0.""" from kittysploit import from...

Salesforce B2C Commerce WebDAV - Detection

Detects Salesforce B2C Commerce WebDAV by checking for specific patterns in a 404 response. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Salesforce B2C Commerce WebDAV by checking for specific patterns in a 404 response.""" from kittysploit import from lib.protocols.http.httpclient import...

Mitric Checker Login Panel - Detect

Mitric Checker login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Mitric Checker login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Mitric Checker Login Panel - Detect',...

SysAid Help Desk <15.2 - Local File Inclusion Detection

SysAid Help Desk before 15.2 contains multiple local file inclusion vulnerabilities which can allow remote attackers to read arbitrary files via .. dot dot in the fileName parameter of getGfiUpgradeFile or cause a denial of service CPU and memory consumption via .. dot dot in the fileName paramet...

NPM .npmignore File Disclosure Detection

Detected NPM .npmignore configuration file, potentially exposing excluded files and project structure information. !/usr/bin/env python3 -- coding: utf-8 -- """Detected NPM .""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Casdoor - Authorization Bypass Detection

Casdoor up to 1.811.0 contains an authorization bypass caused by manipulation in HandleScim function in controllers/scim.go, letting remote attackers bypass authorization, exploit requires remote access. !/usr/bin/env python3 -- coding: utf-8 -- """Casdoor up to 1.""" from kittysploit import from...

MeteoBridge - Detect

Exposed MeteoBridge devices by identifying their unique HTTP response patterns. !/usr/bin/env python3 -- coding: utf-8 -- """Exposed MeteoBridge devices by identifying their unique HTTP response patterns.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...