Telnet Detection

Telnet is a network protocol used to virtually access a computer and to provide a two-way, collaborative and text-based communication channel between two machines. !/usr/bin/env python3 -- coding: utf-8 -- """Telnet is a network protocol used to virtually access a computer and to provide a two-wa...

ThinkCMF Panel - Detect

ThinkCMF panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ThinkCMF panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ThinkCMF Panel - Detect', 'description': 'ThinkCMF panel was...

Tomcat Stack Traces Enabled Detection

Examine whether Tomcat stack traces are turned on by employing a designated problematic pattern. !/usr/bin/env python3 -- coding: utf-8 -- """Examine whether Tomcat stack traces are turned on by employing a designated problematic pattern.""" from kittysploit import from...

TOTOLINK N150RT - Password Exposure Detection

Detects password exposure vulnerability in TOTOLINK N150RT router where sensitive credentials are exposed in the password.htm page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects password exposure vulnerability in TOTOLINK N150RT router where sensitive credentials are exposed in t.""" from...

T-Up OpenFrame Detection

Detects T-Up OpenFrame. !/usr/bin/env python3 -- coding: utf-8 -- """Detects T-Up OpenFrame.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'T-Up OpenFrame Detection', 'description': 'Detects T-Up OpenFrame.',...

Ubiquiti EdgeRouter - Login Panel Detection

Ubiquiti EdgeRouter is an enterprise-grade router with advanced routing capabilities and VPN features, running EdgeOS Ubiquiti's Vyatta-based firmware. !/usr/bin/env python3 -- coding: utf-8 -- """Ubiquiti EdgeRouter is an enterprise-grade router with advanced routing capabilities and VPN feature...

Visual Studio Code Settings - Credential Exposure Detection

Detected exposed Visual Studio Code configuration files that were accessible over HTTP, which could have led to credential leakage or sensitive workspace disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed Visual Studio Code configuration files that were accessible over HTTP...

Webtools Home Detection

Webtools panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Webtools panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Webtools Home Detection', 'description': 'Webtools panel was...

WordPress Readme File Detection

Detects WordPress Readme File. !/usr/bin/env python3 -- coding: utf-8 -- """Detects WordPress Readme File.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WordPress Readme File Detection', 'description': 'Detects...

WordPress Plugin WPML Version < 4.6.1 Cross-Site Scripting Detection

WordPress Plugin WPML Version 4.6.1 is vulnerable to RXSS via wplang parameter. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin WPML Version 4.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WordPress...

WordPress AddToAny Share Buttons Plugin - Full Path Disclosure Detection

The AddToAny Share Buttons plugin for WordPress was detected to be vulnerable to Full Path Disclosure, allowing unauthenticated access to the full application path. !/usr/bin/env python3 -- coding: utf-8 -- """The AddToAny Share Buttons plugin for WordPress was detected to be vulnerable to Full...

WordPress Plugin GDPR Cookie Consent - Full Path Disclosure Detection

WordPress GDPR Cookie Consent cookie-law-info plugin is vulnerable to full path disclosure via direct access to plugin files. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress GDPR Cookie Consent cookie-law-info plugin is vulnerable to full path disclosure via direct access.""" from...

WordPress Custom Tables 3.4.4 - Cross-Site Scripting Detection

WordPress Custom Tables 3.4.4 plugin contains a cross-site scripting vulnerability via the key parameter. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Custom Tables 3.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

WordPress Plugin Site Kit by Google - Full Path Disclosure Detection

WordPress plugin Site Kit by Google internal file system path is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress plugin Site Kit by Google internal file system path is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

WordPress Plugin Idx Broker Platinum Listing Detection

Searches for sensitive directories present in the idx-broker-platinum plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for sensitive directories present in the idx-broker-platinum plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

WordPress SEO Plugin Rank Math - Full Path Disclosure Detection

WordPress Rank Math SEO plugin is vulnerable to full path disclosure via direct access to plugin files. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Rank Math SEO plugin is vulnerable to full path disclosure via direct access to plugin files.""" from kittysploit import from...

WordPress WPS Hide Login - Error Log Disclosure Detection

Detected whether the WPS Hide Login plugin’s /classes/ directory was exposed with directory listing enabled due to server misconfiguration, potentially disclosing PHP error logs or source code. !/usr/bin/env python3 -- coding: utf-8 -- """Detected whether the WPS Hide Login plugin’s /classes/...

XWiki - Detection

XWiki Platform was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """XWiki Platform was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'XWiki - Detection', 'description': 'XWiki Platform was...

YesWiki - Cross-Site Scripting Detection

YesWiki versions 4.5.3 are vulnerable to multiple reflected cross-site scripting XSS vulnerabilities, allowing arbitrary JavaScript execution. !/usr/bin/env python3 -- coding: utf-8 -- """YesWiki versions 4.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

AFP Server Detect

Detects AFP Server Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects AFP Server Detect.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'AFP Server Detect', 'description':...

Checkmk Agent Info Disclosure Detection

The Checkmk agent had exposed sensitive system information on TCP port 6556 without requiring authentication. !/usr/bin/env python3 -- coding: utf-8 -- """The Checkmk agent had exposed sensitive system information on TCP port 6556 without requiring authentication.""" import socket from kittysploi...

DiskStation FTP Service - Detect

DiskStation FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """DiskStation FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'DiskStation FTP...

Exim - Detect

Exim can accept messages from remote hosts using SMTP over TCP/IP, and as well as from local processes. It handles local deliveries to mailbox files or to pipes attached to commands, as well as remote SMTP deliveries to other hosts. !/usr/bin/env python3 -- coding: utf-8 -- """Exim can accept...

JD FTP Service - Detect

JD FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """JD FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'JD FTP Service - Detect',...

MikroTik FTP Service - Detect

MikroTik FTP server was detected. !/usr/bin/env python3 -- coding: utf-8 -- """MikroTik FTP server was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'MikroTik FTP Service -...

Windows Remote Desktop Protocol - Detect

Windows Remote Desktop Protocol was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Windows Remote Desktop Protocol was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name':...

Ubersmith Setup Page - Exposure Detection

Detects exposed Ubersmith Setup page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed Ubersmith Setup page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ubersmith Setup Page - Exposure Detection',...

Celery Flower - Unauthenticated Access Detection

Celery Flower was able to be accessed with no authentication requirements in place. !/usr/bin/env python3 -- coding: utf-8 -- """Celery Flower was able to be accessed with no authentication requirements in place.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...

APC UPC Multimon Status Page - Detect

Multimon UPS status page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Multimon UPS status page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'APC UPC Multimon Status Page - Detect',...

Veeam Backup Enterprise Manager Login - Detect

Veeam Backup Enterprise Manager Login !/usr/bin/env python3 -- coding: utf-8 -- """Veeam Backup Enterprise Manager Login.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Veeam Backup Enterprise Manager Login - Detect...

VTScada - Internet Client Panel Detection

VTScada by Trihedral Engineering is a SCADA platform used in water/ wastewater, oil and gas, and utilities. The Internet Client feature exposes a browser-based view of process data, and is commonly deployed by municipal water systems across North America. !/usr/bin/env python3 -- coding: utf-8 --...

Vue PACS - Panel Detection

Vue PACS was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Vue PACS was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Vue PACS - Panel Detection', 'description': 'Vue PACS was detected.', 'author...

Webasyst Installer Exposure Detection

Webasyst is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Webasyst is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

WordPress Installer Log Detection

This file is generated during the installation process of wordpress and is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """This file is generated during the installation process of wordpress and is exposed.""" import re from kittysploit import from lib.protocols.http.httpclient import...

WordPress 1 flash gallery listing Detection

Searches for sensitive directories present in the 1-flash-gallery plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for sensitive directories present in the 1-flash-gallery plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Adobe Experience Manager - Cross-Site Scripting Detection

Adobe Experience Manager contains a cross-site scripting vulnerability via requests using the selector childlist when the dispatcher does not respect the content-type responded by AEM and flips from application/json to text/html. As a consequence, the reflected suffix is executed and interpreted ...

AirOS Panel - Detect

AirOS panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """AirOS panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AirOS Panel - Detect', 'description': 'AirOS panel was detected.',...

Ambassador API Gateway Diagnostics - Exposure Detection

Detected Ambassador API Gateway diagnostics portal, revealing service mappings, API endpoints, routing configurations, and internal cluster information. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Ambassador API Gateway diagnostics portal, revealing service mappings, API endpoints,...

WordPress Spider Calendar <=1.5.65 - Cross-Site Scripting Detection

WorsPress Spider Calendar plugin through 1.5.65 is susceptible to cross-site scripting. The plugin does not sanitize and escape the callback parameter before outputting it back in the page via the window AJAX action, available to both unauthenticated and authenticated users. An attacker can injec...

Mastodon Prototype Pollution Vulnerability Detection

The GitHub repository mastodon/mastodon prior to 3.5.0 contains a Prototype Pollution vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """The GitHub repository mastodon/mastodon prior to 3.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner...

WordPress Videos sync PDF <=1.7.4 - Local File Inclusion Detection

WordPress Videos sync PDF 1.7.4 and prior does not validate the p parameter before using it in an include statement, which could lead to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Videos sync PDF 1.""" from kittysploit import from lib.protocols.http.httpclient...

WAVLINK WN533A8 - Improper Access Control Detection

WAVLINK WN533A8 M33A8.V5030.190716 is susceptible to improper access control. An attacker can obtain usernames and passwords via view-source:http://IPADDRESS/sysinit.shtml?r=52300 and searching for logincheckuser; and thereby possibly obtain sensitive information, modify data, and/or execute...

phpMyFAQ < 3.1.8 - Cross-Site Scripting Detection

phpMyFAQ versions prior to 3.1.8 contain a reflected cross-site scripting vulnerability in the search functionality. The application fails to properly sanitize user input in the search parameter, allowing attackers to inject and execute malicious JavaScript code in the context of other users'...

Academy LMS 6.2 - Cross-Site Scripting Detection

A vulnerability was found in Academy LMS 6.2 on Windows. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /academy/tutor/filter of the component GET Parameter Handler. The manipulation of the argument...

Stable Diffusion Webui 1.10.0 - Open Redirect Detection

An open redirect vulnerability exists in Stable-Diffusion-Webui 1.10.0, where the file parameter in the /file= endpoint can be manipulated to redirect users to malicious websites. This could facilitate phishing attacks by tricking users into visiting attacker-controlled URLs. !/usr/bin/env python...

GnuBoard5 5.5.16 - Open Redirect Detection

Gnuboard5 5.5.16 contains an open redirect vulnerability caused by insufficient URL parameter verification in bbs/logout.php, letting remote attackers redirect users to arbitrary URLs, exploit requires crafted URL parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Gnuboard5 5.""" import re...

DATAGERRY - REST API Auth Bypass Detection

Incorrect access control in BECN DATAGERRY v2.2 allows attackers to execute arbitrary commands via crafted web requests. !/usr/bin/env python3 -- coding: utf-8 -- """Incorrect access control in BECN DATAGERRY v2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...

My Geo Posts Free <= 1.2 - PHP Object Injection Detection

The My Geo Posts Free plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.2 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software. If ...

Lawo AG vsm LTC Time Sync (vTimeSync) - Path Traversal Detection

The web server of Lawo AG vsm LTC Time Sync vTimeSync is affected by a "..." triple dot path traversal vulnerability. By sending a specially crafted HTTP request, an unauthenticated remote attacker could download arbitrary files from the operating system. As a limitation, the exploitation is only...

Calibre <= 7.15.0 - Reflected Cross-Site Scripting (XSS) Detection

It is possible to inject arbitrary JavaScript code into the /browse endpoint of the Calibre content server, allowing an attacker to craft a URL that when clicked by a victim, will execute the attacker’s JavaScript code in the context of the victim’s browser. If the Calibre server is running with...