Oracle Reports Services - Servlet Detection

Oracle Reports Services - Servlet Command dashboard !/usr/bin/env python3 -- coding: utf-8 -- """Oracle Reports Services - Servlet Command dashboard.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Oracle Reports...

Ivanti(R) Cloud Services Appliance - Panel Detection

An Ivanti Cloud Services Appliance panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An Ivanti Cloud Services Appliance panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'IvantiR Cloud...

Microsoft Active Directory Certificate Services Panel - Detect

Microsoft Active Directory Certificate Services panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Microsoft Active Directory Certificate Services panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: inf...

Tableau Services Manager Login Panel - Detect

Tableau Services Manager login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Tableau Services Manager login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tableau Services...

Avaya Aura Utility Services Administration - Cross-Site Scripting Detection

Avaya Aura Utility Services Administration contains a cross-site scripting vulnerability. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch oth...

InfluxDB <1.7.6 - Authentication Bypass Detection

InfluxDB before 1.7.6 contains an authentication bypass vulnerability via the authenticate function in services/httpd/handler.go. A JWT token may have an empty SharedSecret aka shared secret. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized...

Ivanti EPM Cloud Services Appliance Code Injection Detection

Ivanti EPM Cloud Services Appliance CSA before version 4.6.0-512 is susceptible to a code injection vulnerability because it allows an unauthenticated user to execute arbitrary code with limited permissions nobody. !/usr/bin/env python3 -- coding: utf-8 -- """Ivanti EPM Cloud Services Appliance C...

Kube API Services Detection

Scans for kube services !/usr/bin/env python3 -- coding: utf-8 -- """Scans for kube services.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.scanner.http.probeguard import lookslikekubernetesservicelist, validatejsonprobe class ModuleScanner, Httpclient:...

Omni Commerce Connect (OCC) Rest APIs Detection

The Omni Commerce Connect OCC API exposes a broad set of commerce and data services. It enables you to integrate SAP Commerce functionality anywhere in your application landscape. !/usr/bin/env python3 -- coding: utf-8 -- """The Omni Commerce Connect OCC API exposes a broad set of commerce and da...

OpenTouch Multimedia Services - Detect

OpenTouch Multimedia Services Login Panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """OpenTouch Multimedia Services Login Panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OpenTouch...

Splunk <=7.0.1 - Information Disclosure Detection

Splunk through 7.0.1 is susceptible to information disclosure by appending raw/services/server/info/server-info?outputmode=json to a query, as demonstrated by discovering a license key. !/usr/bin/env python3 -- coding: utf-8 -- """Splunk through 7.""" from kittysploit import from...

CirCarLife Scada <4.3 - System Log Exposure Detection

CirCarLife Scada before 4.3 allows remote attackers to obtain sensitive information via a direct request for the html/log or services/system/info.html URI. CirCarLife is an internet-connected electric vehicle charging station. !/usr/bin/env python3 -- coding: utf-8 -- """CirCarLife Scada before...

Amazon Web Services S3 Explorer - Detect

Amazon Web Services S3 Explorer page was detected. Page contains links to sensitive information. !/usr/bin/env python3 -- coding: utf-8 -- """Amazon Web Services S3 Explorer page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Fuji Xerox Internet Services Panel - Detect

Fuji Xerox Internet Services panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Fuji Xerox Internet Services panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Fuji Xerox Internet...

Microsoft Exchange Web Service - Detect

Microsoft Exchange Web Services was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Microsoft Exchange Web Services was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Microsoft Exchange We...

Microsoft Internet Information Services 8 Detection

Detects Microsoft Internet Information Services 8. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Microsoft Internet Information Services 8.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Microsoft Internet...

Cisco Identity Services Engine Admin Login Panel - Detect

Cisco Identity Services Engine admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Cisco Identity Services Engine admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name'...

Microsoft SharePoint - Web Services Discovery Detection

Detected exposed SharePoint web services via /vtibin/spdisco.aspx endpoint !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed SharePoint web services via /vtibin/spdisco.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: in...

TIBCO Spotfire Statistics Services - Detect

TIBCO Spotfire Statistics Services was detected. !/usr/bin/env python3 -- coding: utf-8 -- """TIBCO Spotfire Statistics Services was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'TIBCO Spotfire Statistics...

SOAP-based ASP.NET web services ASMX - Detect

SOAP-based ASP.NET web services collection was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SOAP-based ASP.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SOAP-based ASP.NET web services ASMX - Detect',...