Web Proxy Auto-Discovery Configuration File - Detect

Web Proxy Auto-Discovery configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Web Proxy Auto-Discovery configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Web Pro...

LiteLLM Proxy - Model Exposure Detection

LiteLLM proxy was detected with anonymous access to the model listing API. LiteLLM proxies that ship without generalsettings.masterkey or with the key disabled expose the configured upstream model catalog via /v1/models and /model/info — revealing which OpenAI / Anthropic / Azure / Bedrock /...

Nginx Proxy Manager Login Panel - Detect

Nginx Proxy Manager login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Nginx Proxy Manager login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Nginx Proxy Manager Login Panel...

OpenShift OAuth Proxy - Panel Detect

Detects OpenShift OAuth Proxy login endpoints via oauthproxycsrf or oauthproxy cookie and login page content. Checks both the default port and port 9001. !/usr/bin/env python3 -- coding: utf-8 -- """Detects OpenShift OAuth Proxy login endpoints via oauthproxycsrf or oauthproxy cookie and login pa...

PHP Proxy Detect

Detects PHP Proxy Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects PHP Proxy Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PHP Proxy Detect', 'description': 'Detects PHP Proxy Detect.', 'author'...

BlueCoat Telnet Proxy - Detect

Detects Blue Coat telnet proxy services. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Blue Coat telnet proxy services.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'BlueCoat...

Sidewinder FTP Proxy Service - Detect

Sidewinder FTP Proxy service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Sidewinder FTP Proxy service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name':...

SAP Web Dispatcher admin portal detection

Detection of SAP Web Dispatcher Admin Portal !/usr/bin/env python3 -- coding: utf-8 -- """Detection of SAP Web Dispatcher Admin Portal.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SAP Web Dispatcher admin portal...

Java FTP Proxy Service - Detect

Java FTP Proxy service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Java FTP Proxy service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'Java FTP Proxy...

Apache Tomcat JK Connect <=1.2.44 - Manager Access Detection

Apache Tomcat JK modjk Connector 1.2.0 to 1.2.44 allows specially constructed requests to expose application functionality through the reverse proxy. It is also possible in some configurations for a specially constructed request to bypass the access controls configured in httpd. While there is so...

Artica Web Proxy 4.30 - Authentication Bypass/SQL Injection Detection

Artica Web Proxy 4.30.00000000 allows remote attacker to bypass privilege detection and gain web backend administrator privileges through SQL injection of the apikey parameter in fw.login.php. !/usr/bin/env python3 -- coding: utf-8 -- """Artica Web Proxy 4.""" from kittysploit import from...

Artica Proxy 4.30.000000 - Cross-Site Scripting Detection

Artica Proxy 4.30.000000 contains a cross-site scripting vulnerability via the password parameter in /fw.login.php. !/usr/bin/env python3 -- coding: utf-8 -- """Artica Proxy 4.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Mailpit < 1.28.3 - Server-Side Request Forgery Detection

Mailpit = 1.28.0 contains a server-side request forgery caused by insufficient validation of internal IP addresses in the /proxy endpoint, letting attackers make requests to internal network resources, exploit requires crafted HTTP GET requests. !/usr/bin/env python3 -- coding: utf-8 -- """Mailpi...

Artica Proxy Community Edition <4.30.000000 - Local File Inclusion Detection

Artica Proxy Community Edition before 4.30.000000 is vulnerable to local file inclusion via the fw.progrss.details.php popup parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Artica Proxy Community Edition before 4.""" import re from kittysploit import from lib.protocols.http.httpclient...

Onair2 < 3.9.9.2 & KenthaRadio < 2.0.2 - Remote File Inclusion/Server-Side Request Forgery Detection

Onair2 3.9.9.2 and KenthaRadio 2.0.2 have exposed proxy functionality to unauthenticated users. Sending requests to this proxy functionality will have the web server fetch and display the content from any URI, allowing remote file inclusion and server-side request forgery. !/usr/bin/env python3 -...

Appspace 6.2.4 - Server-Side Request Forgery Detection

Appspace 6.2.4 allows SSRF via the api/v1/core/proxy/jsonprequest url parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Appspace 6.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Appspace 6.2.4 - Server-Side...

Geoserver - Server-Side Request Forgery Detection

GeoServer through 2.18.5 and 2.19.x through 2.19.2 allows server-side request forgery via the option for setting a proxy host. !/usr/bin/env python3 -- coding: utf-8 -- """GeoServer through 2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Artica Proxy - Unauthenticated LFI Detection

The Artica Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the "www-data" user. This issue was demonstrated on version 4.50 of the The Artica-Proxy administrative web application attempts to...

Citrix NetScaler ADC and NetScaler Gateway - Remote Code Execution Detection

critical unauthenticated remote code execution RCE vulnerability affecting Citrix ADC NetScaler ADC and Citrix Gateway appliances configured as a Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy or AAA virtual server. Exploitation can lead to arbitrary code execution. !/usr/bin/env python3 ...

Retool < 3.88 - SVG Cross-Site Scripting Detection

This template checks for SVG Cross-Site ScriptingXSS vulnerability via the Image Proxy URL parameter in Retool. !/usr/bin/env python3 -- coding: utf-8 -- """This template checks for SVG Cross-Site ScriptingXSS vulnerability via the Image Proxy URL parameter in Reto.""" from kittysploit import fro...