WordPress WPS Hide Login - Error Log Disclosure Detection

Detected whether the WPS Hide Login plugin’s /classes/ directory was exposed with directory listing enabled due to server misconfiguration, potentially disclosing PHP error logs or source code. !/usr/bin/env python3 -- coding: utf-8 -- """Detected whether the WPS Hide Login plugin’s /classes/...

PHP IPAM Installation Page - Exposed Detection

PHP IPAM is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """PHP IPAM is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

SeaCMS V6.4.5 RCE Detection

A vulnerability in SeaCMS allows remote unauthenticated attackers to execute arbitrary PHP code. !/usr/bin/env python3 -- coding: utf-8 -- """A vulnerability in SeaCMS allows remote unauthenticated attackers to execute arbitrary PHP code.""" from kittysploit import from...

WordPress LazyLoad Plugin - Full Path Disclosure Detection

WordPress Plugin LazyLoad files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin LazyLoad files are publicly accessible without ABSPATH...

WordPress Configuration wp-env - Exposure Detection

Detected the WordPress wp-env.json configuration file publicly accessible, potentially revealing the PHP version, installed plugins, themes, and development environment details. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the WordPress wp-env.""" from kittysploit import from...

WordPress Call Now Button - Full Path Disclosure Detection

WordPress Plugin Call Now Button files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin Call Now Button files are publicly accessible...

WordPress Elementor Pro - Full Path Disclosure Detection

WordPress Plugin Elementor Pro plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin Elementor Pro plugin files are publicly...

WordPress Plugin Max Mega Menu (megamenu) - Full Path Disclosure Detection

WordPress Plugin Max Mega Menu plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin Max Mega Menu plugin files are publicly...

WordPress Coming Soon Page - Full Path Disclosure Detection

WordPress Coming Soon Page & Maintenance Mode plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Coming Soon Page & Maintenance Mode...

WordPress SVG Support - Full Path Disclosure Detection

The WordPress SVG Support plugin was detected to have publicly accessible PHP files without ABSPATH protection, which exposed sensitive server path information. Direct access to vendor/composer files triggered PHP fatal errors that revealed the full WordPress filesystem path. !/usr/bin/env python...

WordPress WPForms - Full Path Disclosure Detection

WordPress Plugin WPForms files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin WPForms files are publicly accessible without ABSPATH...

WordPress WPFront Scroll Top - Full Path Disclosure Detection

WordPress Plugin WPFront Scroll Top plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin WPFront Scroll Top plugin files are...

PHP_CodeSniffer Configuration Exposure - Detect

PHPCodeSniffer configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """PHPCodeSniffer configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PHPCodeSniffer Configuratio...

PHP Detect

Detects PHP Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects PHP Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PHP Detect', 'description': 'Detects PHP Detect.', 'author': 'KittySploit Team',...

PHP End-of-Life - Detect

Detected PHP versions that have reached End-of-Life EOL and no longer receive security updates. !/usr/bin/env python3 -- coding: utf-8 -- """Detected PHP versions that have reached End-of-Life EOL and no longer receive security updates.""" from kittysploit import from lib.protocols.http.httpclien...

Qcubed - Cross-Site Scripting Detection

Qcubed contains a cross-site scripting vulnerability which allows a remote attacker to inject arbitrary JavaScript via the /assets/php/devtools/installer/step2.php endpoint and the installationpath parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Qcubed contains a cross-site scripting...

Roundcube CVE-2025-49113 Detection

Fingerprints Roundcube via rcversion and flags builds before 1.5.10 / 1.6.x before 1.6.11 as vulnerable to post-auth PHP deserialization RCE. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Roundcube versions vulnerable to CVE-2025-49113.""" from kittysploit import from...

Symfony Lock File - Exposure Detection

symfony.lock was found accessible, exposing a full list of installed Composer packages, library versions, and metadata for a Symfony-based PHP application. Disclosure of this file can provide insight into the application's attack surface, potentially revealing vulnerable or outdated dependencies...

Twig PHP <2.4.4 template engine - SSTI Detection

A vulnerability in Twig PHP allows remote attackers to cause the product to execute arbitrary commands via an SSTI vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """A vulnerability in Twig PHP allows remote attackers to cause the product to execute arbitrary commands via an .""" from...

Generic PHP Backup Information Disclosure Detection

Generic php file source code was detected via backup files. !/usr/bin/env python3 -- coding: utf-8 -- """Generic php file source code was detected via backup files.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...