Maestro LISTSERV - Detect

Maestro LISTSERV panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Maestro LISTSERV panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Maestro LISTSERV - Detect', 'description': 'Maest...

Yonyou UFIDA NC - Information Exposure Detection

After logging in and visiting the address where the information was leaked, you will have permission to upload files. Then just go back to the homepage and view the published content directly. !/usr/bin/env python3 -- coding: utf-8 -- """After logging in and visiting the address where the...

Moodle Changelog File Detect

Moodle has a file which describes API changes in core libraries and APIs, and can be used to discover Moodle version. !/usr/bin/env python3 -- coding: utf-8 -- """Moodle has a file which describes API changes in core libraries and APIs, and can be used to discover Moodle v.""" from kittysploit...

WordPress Ivory Search - Full Path Disclosure Detection

WordPress Plugin Ivory Search plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin Ivory Search plugin files are publicly...

Netsparker Enterprise Installer Detection

Netsparker Enterprise is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Netsparker Enterprise is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclien...

Apache Tomcat - Snoop Servlet Information Disclosure Detection

The Snoop servlet is exposed in the Apache Tomcat examples directory. !/usr/bin/env python3 -- coding: utf-8 -- """The Snoop servlet is exposed in the Apache Tomcat examples directory.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

CraftCMS Debug Methods Exposed Detection

Detected CraftCMS with devMode enabled, which exposed the Yii2 debug toolbar and sensitive information. This misconfiguration could have leaked database queries, session data, cookies, stack traces, CSRF tokens, and internal application details to unauthenticated users. !/usr/bin/env python3 --...

LocalStack - Detect

LocalStack localstack.cloud / github.com/localstack/localstack is a local AWS cloud-service emulator widely used in development and CI. It typically listens on TCP 4566 and exposes an unauthenticated /localstack/health endpoint that lists every emulated service and its enabled state. An exposed...

Poste.io - Installer Detection

Poste.io is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Poste.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Poste.io - Installer Detection',...

Atmail 6.5.0 - Cross-Site Scripting Detection

Atmail 6.5.0 contains a cross-site scripting vulnerability via the index.php/admin/index/ 'error' parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Atmail 6.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Atma...

Blockchain RPC - txpool_content Exposed Detection

The blockchain RPC endpoint exposes the txpoolcontent method, which returns all pending unmined transactions in the mempool including sender addresses, transaction data, gas prices, and values. This enables frontrunning attacks, sandwich attacks, and other MEV Maximal Extractable Value exploitati...

Popup by Supsystic <1.10.5 - Cross-Site scripting Detection

WordPress Popup by Supsystic before 1.10.5 did not sanitize the tab parameter of its options page before outputting it in an attribute, leading to a reflected cross-site scripting issue. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Popup by Supsystic before 1.""" from kittysploit import...

Koha 3.20.1 - Directory Traversal Detection

Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08, and 3.20.x before 3.20.1 allow remote attackers to read arbitrary files via a ..%2f dot dot encoded slash in the templatepath parameter to 1 svc/virtualshelves/search or 2 svc/members/search. !/usr/bin/env python3 -- coding...

Orchard 'ReturnUrl' Parameter URI - Open Redirect Detection

Open redirect vulnerability in Users/Account/LogOff in Orchard 1.0.x before 1.0.21, 1.1.x before 1.1.31, 1.2.x before 1.2.42, and 1.3.x before 1.3.10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the ReturnUrl parameter. !/usr/bin/env...

WordPress Spreadsheet - Cross-Site Scripting Detection

WordPress Spreadsheet plugin contains a reflected cross-site scripting vulnerability in /dhtmlxspreadsheet/codebase/spreadsheet.php. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Spreadsheet plugin contains a reflected cross-site scripting vulnerability in /dhtmlxspreadsheet/cod.""" from...

Metatag CMS Detection

Generic CMS Detection using html meta generator tag !/usr/bin/env python3 -- coding: utf-8 -- """Generic CMS Detection using html meta generator tag.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Metatag...

FOSSBilling Panel - Detect

FOSSBilling panel has been detected. !/usr/bin/env python3 -- coding: utf-8 -- """FOSSBilling panel has been detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'FOSSBilling Panel - Detect', 'description':...

Perforce Repository Disclosure Detection

Detected an exposed .p4ignore file, which could have revealed ignored files, sensitive paths, or developer-specific information useful for further enumeration. !/usr/bin/env python3 -- coding: utf-8 -- """Detected an exposed .""" from kittysploit import from lib.protocols.http.httpclient import...

CS-Cart - Local File Inclusion Detection

CS-Cart is vulnerable to local file inclusion because it allows remote unauthenticated attackers to access locally stored files and reveal their content. !/usr/bin/env python3 -- coding: utf-8 -- """CS-Cart is vulnerable to local file inclusion because it allows remote unauthenticated attackers t...

NATS Messaging Server Detection

Detects NATS servers by reading the INFO greeting on TCP 4222. !/usr/bin/env python3 -- coding: utf-8 -- """Detect NATS messaging servers via INFO handshake.""" from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient from lib.scanner.nats.detectors import probenats...

Tongda OA v11.6 report_bi.func.php - SQL injection Detection

Tongda OA v11.6 reportbi.func.php has a SQL injection vulnerability, and attackers can obtain database information through the vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """Tongda OA v11.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

WordPress FastDup <= 2.1.9 Sensitive Information Exposure - Directory Listing Detection

FastDup WordPress plugin 2.2 contains a directory listing vulnerability caused by lack of access restrictions in sensitive directories, letting attackers view export files, exploit requires no authentication. !/usr/bin/env python3 -- coding: utf-8 -- """FastDup WordPress plugin 2.""" from...

Joomla! Component Foobla Suggestions 1.5.1.2 - Local File Inclusion Detection

A directory traversal vulnerability in the Foobla Suggestions comfooblasuggestions component 1.5.1.2 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory...

Ametys CMS Information Disclosure Detection

Ametys CMS before 4.5.0 allows a remote unauthenticated attacker to read documents such as plugins/web/service/search/auto-completion/domain/en.xml and similar pathnames for other languages via the auto-completion plugin, which contain all characters typed by all users, including the content of...

WordPress XMLRPC Detection

Detects WordPress XMLRPC. !/usr/bin/env python3 -- coding: utf-8 -- """Detects WordPress XMLRPC.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WordPress XMLRPC Detection', 'description': 'Detects WordPress XMLRPC.'...

Git Configuration - Detect

Git configuration was detected via the pattern /.git/config and log file on passed URLs. !/usr/bin/env python3 -- coding: utf-8 -- """Git configuration was detected via the pattern /.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

Kyocera Printer Panel - Detect

Kyocera printer panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Kyocera printer panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kyocera Printer Panel - Detect', 'description':...

Hikvision Springboot Env Actuator - Detect

The HIKVISION comprehensive security management platform has information leakage vulnerabilities, through which attackers can obtain sensitive information such as environment env for further attacks !/usr/bin/env python3 -- coding: utf-8 -- """The HIKVISION comprehensive security management...

Zebra Printer Detect

Zebra Printer panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Zebra Printer panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Zebra Printer Detect', 'description': 'Zebra Printer...

HyperDX Panel - Detect

HyperDX panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """HyperDX panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HyperDX Panel - Detect', 'description': 'HyperDX panel was...

Kedacom Network Keyboard Console - Arbitrary File Read Detection

There is an arbitrary file reading vulnerability in the KEDACOM network keyboard console. Attacking this vulnerability can read arbitrary information from the server !/usr/bin/env python3 -- coding: utf-8 -- """There is an arbitrary file reading vulnerability in the KEDACOM network keyboard...

Budibase - Admin Installer Detection

Detected Budibase admin setup checklist endpoint was publicly accessible with no admin user created, allowing unauthenticated users to complete setup and gain full platform control. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Budibase admin setup checklist endpoint was publicly accessib...

Vigor Login Panel - Detect

Vigor login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Vigor login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Vigor Login Panel - Detect', 'description': 'Vigor login...

Cisco IOS XE - Detect

Cisco IOS XE login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Cisco IOS XE login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cisco IOS XE - Detect', 'description': 'Cisco...

Analytics Insights for Google Analytics 4 < 6.3 - Open Redirect Detection

The plugin is vulnerable to Open Redirect due to insufficient validation on the redirect oauth2callback.php file. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action. !/usr/bin/env...

FUXA 1.3.0 - Unauthenticated ICS/SCADA Project Data Disclosure Detection

FUXA v1.3.0 exposes full SCADA/HMI project configuration via GET /api/project without authentication, even when secureEnabled is true. The secureFnc middleware auto-generates a valid guest JWT when no token is provided, bypassing authentication. Exposed data includes server-side scripts, device...

Detect DNS over HTTPS

With DNS over HTTPS DoH, DNS queries and responses are encrypted and sent via the HTTP or HTTP/2 protocols. DoH ensures that attackers cannot forge or alter DNS traffic. DoH uses port 443, which is the standard HTTPS traffic port, to wrap the DNS query in an HTTPS request. DNS queries and respons...

Vite dev server - Cross-Site Scripting Detection

Vite's dev server, when used with appType: 'custom' and manually invoking server.transformIndexHtml using the unmodified request URL, is vulnerable to XSS via a crafted URL payload. If the HTML being served includes an inline module script ..., an attacker can inject a script via the URL,...

FatPipe WARP/IPVPN/MPVPN - Authorization Bypass Detection

FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 contain a missing authorization caused by lack of access control in the web management interface, letting remote attackers access sensitive URLs, exploit requires no authentication. !/usr/bin/env python3 -- codin...

Apache Druid Unauth Detection

Apache Druid is exposed to external users. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Druid is exposed to external users.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Druid Unauth Detection',...

OcoMon Login Panel - Detect

a tiny helpdesk system written in php !/usr/bin/env python3 -- coding: utf-8 -- """a tiny helpdesk system written in php.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OcoMon Login Panel - Detect',...

LinShare Login Panel - Detect

LinShare login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """LinShare login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LinShare Login Panel - Detect', 'description':...

DATAGERRY - REST API Auth Bypass Detection

Incorrect access control in BECN DATAGERRY v2.2 allows attackers to execute arbitrary commands via crafted web requests. !/usr/bin/env python3 -- coding: utf-8 -- """Incorrect access control in BECN DATAGERRY v2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...

WordPress Directorist <7.3.1 - Information Disclosure Detection

WordPress Directorist plugin before 7.3.1 is susceptible to information disclosure. The plugin discloses the email address of all users in an AJAX action available to both unauthenticated and authenticated users. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Directorist plugin before 7."...

Nimsoft Wasp Detection

Detect Nimsoft Wasp WebPage !/usr/bin/env python3 -- coding: utf-8 -- """Detect Nimsoft Wasp WebPage.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Nimsoft Wasp Detection', 'description': 'Detect Nimsoft Wasp...

Westermo Industrial Router - Login Panel Detection

Westermo industrial router web interface panel has been detected. !/usr/bin/env python3 -- coding: utf-8 -- """Westermo industrial router web interface panel has been detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Esafenet CDG mysql - File Read Detection

CDGServer3 Unauthorized File Download vulnerability is detected. !/usr/bin/env python3 -- coding: utf-8 -- """CDGServer3 Unauthorized File Download vulnerability is detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Apache ActiveMQ < 5.16.5/5.17.3 - Remote Code Execution Detection

Once an user is authenticated on Jolokia, he can potentially trigger arbitrary code execution. In details, in ActiveMQ configurations, jetty allows org.jolokia.http.AgentServlet to handler request to /api/jolokia org.jolokia.http.HttpRequestHandlerhandlePostRequest is able to create JmxRequest...

Apache HTTP server v2.4.0 to v2.4.39 - Open Redirect Detection

In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with modrewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an unexpected URL within the request URL. !/usr/bin/env python3 -- coding: utf-8 -- """In Apache HTTP server 2.""" impo...

WordPress forget-about-shortcode-buttons 1.1.1 - Cross-Site Scripting Detection

Wordpress plugin forget-about-shortcode-buttons 1.1.1 contains a reflected cross-site scripting vulnerability which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...