Tox Configuration File - Detect

Tox configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Tox configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tox Configuration File - Detect', 'description':...

iTop - User Enumeration via REST Endpoint Detection

From the webservices/rest.php file, several operations are accessible from an unauthenticated user. One of them is doresetpwd, allowing to reset a user password. This feature can be abused to perform user enumeration when a non-existent user is provided. !/usr/bin/env python3 -- coding: utf-8 --...

Jolokia Java Heap Information Disclosure Detection

Detects Jolokia Java Heap Information Disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Jolokia Java Heap Information Disclosure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Jolokia Java Heap...

Moodle Jmol Filter 6.1 - Local File Inclusion Detection

Moodle Jmol Filter 6.1 is vulnerable to local file inclusion through the jsmol.php file, allowing attackers to read arbitrary files on the server. !/usr/bin/env python3 -- coding: utf-8 -- """Moodle Jmol Filter 6.""" import re from kittysploit import from lib.protocols.http.httpclient import...

User Registration & Membership WordPress plugin - Open Redirect Detection

User Registration & Membership WordPress plugin = 5.1.4 contains an open redirect caused by insufficient validation of 'redirecttoonlogout' parameter, letting attackers redirect users to malicious external URLs after logout, exploit requires crafted URL. !/usr/bin/env python3 -- coding: utf-8 --...

Apache Tomcat Example Scripts - Detect

Multiple Apache Tomcat example scripts were detected. !/usr/bin/env python3 -- coding: utf-8 -- """Multiple Apache Tomcat example scripts were detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Tomcat...

AceNet AceReporter Report Panel - Detect

Detects AceNet AceReporter Report Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects AceNet AceReporter Report Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AceNet AceReporter Repo...

XDS-AMR Status Login Panel - Detect

XDS-AMR Status login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """XDS-AMR Status login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'XDS-AMR Status Login Panel - Detect',...

Wing FTP Service - Detect

The File Transfer Protocol FTP is a standard network protocol that transfers computer files between a client and server on a computer network. !/usr/bin/env python3 -- coding: utf-8 -- """The File Transfer Protocol FTP is a standard network protocol that transfers computer files between a...

SmokePing Latency Page for Network Latency Grapher Detection

SmokePing Latency Page is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """SmokePing Latency Page is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SmokePing Latency Page for Network Latency Grapher...

The Events Calendar <= 6.15.2 - Information Disclosure Detection

The Events Calendar WordPress plugin = 6.15.2 contains an information disclosure vulnerability caused by REST endpoint exposure, letting unauthenticated attackers extract data about password-protected vendors or venues, exploit requires no authentication. !/usr/bin/env python3 -- coding: utf-8 --...

Juniper Web Device Manager - Cross-Site Scripting Detection

Juniper Web Device Manager J-Web in Junos OS contains a cross-site scripting vulnerability. This can allow an unauthenticated attacker to run malicious scripts reflected off J-Web to the victim's browser in the context of their session within J-Web, which can allow the attacker to steal...

Cisco ISE Admin Login Panel - Detect

Cisco Identity Services Engine ISE admin login panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Cisco Identity Services Engine ISE admin login panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

Wordfence - Full Path Disclosure Detection

Wordfence WordPress plugin contains a full path disclosure vulnerability due to improper access restrictions in its source files, allowing unauthenticated attackers to retrieve full server paths and aiding exploitation. !/usr/bin/env python3 -- coding: utf-8 -- """Wordfence WordPress plugin...

Cherry Plugin < 1.2.7 - Arbitrary File Retrieval and File Upload Detection

WordPress plugin Cherry 1.2.7 contains an unauthenticated file upload and download vulnerability, allowing attackers to upload and download arbitrary files. This could result in attacker uploading backdoor shell scripts or downloading the wp-config.php file. !/usr/bin/env python3 -- coding: utf-8...

Selenium Grid Panel - Detect

Selenium Grid panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Selenium Grid panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Selenium Grid Panel - Detect', 'description': 'Selenium...

Pexip - Detect

Pexip technology was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Pexip technology was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pexip - Detect', 'description': 'Pexip technology was...

Homematic Panel - Detect

Homematic panel was deetcted. !/usr/bin/env python3 -- coding: utf-8 -- """Homematic panel was deetcted.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Homematic Panel - Detect', 'description': 'Homematic panel was...

Dolibarr Unauthenticated Contacts Database Theft Detection

An issue in Dolibarr 16 before 16.0.5 allows unauthenticated attackers to perform a database dump and access a company's entire customer file, prospects, suppliers, and employee information if a contact file exists. !/usr/bin/env python3 -- coding: utf-8 -- """An issue in Dolibarr 16 before 16.""...

Saia PCD Web-Server Configuration Page - Detect

Saia PCD Web-Server configuration page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Saia PCD Web-Server configuration page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Saia PCD Web-Serv...

SAPControl GetEnvironment - Disclosure Detection

Detected SAP systems where the SAP Start Service sapstartsrv SAPControl SOAP web service exposes the GetEnvironment web method without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Detected SAP systems where the SAP Start Service sapstartsrv SAPControl SOAP web service exposes the...

VMware Authentication Daemon Detection

vmauthd is the VMWare authentication daemon that is included with many VMWare products, including ESXi, and Workstation. !/usr/bin/env python3 -- coding: utf-8 -- """vmauthd is the VMWare authentication daemon that is included with many VMWare products, including ESXi, and .""" import socket from...

Dell EMC RecoverPoint Panel - Detect

Dell EMC RecoverPoint management panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Dell EMC RecoverPoint management panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dell EMC...

Joomla! Component Online Market 2.x - Local File Inclusion Detection

A directory traversal vulnerability in the Online Market commarket component 2.x for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A...

Froxlor Server Management - Installer Detection

Detects the Froxlor Server Management Panel installation page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the Froxlor Server Management Panel installation page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name'...

OneDev < 4.0.3 - User Access Token Leak Detection

OneDev before version 4.0.3 contains an insecure endpoint that allows retrieval of arbitrary user details, including access tokens, due to missing security checks on /users/id, letting attackers leak sensitive data and impersonate users, exploit requires no special conditions. !/usr/bin/env pytho...

Accela Civic Platform <=21.1 - Cross-Site Scripting Detection

Accela Civic Platform through 21.1 contains a cross-site scripting vulnerability via ssoAdapter/logoutAction.do successURL. !/usr/bin/env python3 -- coding: utf-8 -- """Accela Civic Platform through 21.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...

Versa FlexVNF Server Detection

Versa FlexVNF Server Detection magic request params exposes Server signature/version !/usr/bin/env python3 -- coding: utf-8 -- """Versa FlexVNF Server Detection magic request params exposes Server signature/version.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Ubiquiti EdgeRouter - Login Panel Detection

Ubiquiti EdgeRouter is an enterprise-grade router with advanced routing capabilities and VPN features, running EdgeOS Ubiquiti's Vyatta-based firmware. !/usr/bin/env python3 -- coding: utf-8 -- """Ubiquiti EdgeRouter is an enterprise-grade router with advanced routing capabilities and VPN feature...

HedgeDoc Collaborative Editor - Detect

HedgeDoc is an open-source, collaborative markdown editor for teams to share and co-edit notes in real time. This template detects publicly reachable HedgeDoc instances by fingerprinting unique branding markers and the dedicated Hedgedoc-Version response header. !/usr/bin/env python3 -- coding:...

Palo Alto Networks GlobalProtect Login Panel - Detect

Palo Alto Networks GlobalProtect login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Palo Alto Networks GlobalProtect login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Palo...

Node ecstatic Directory Listing Detection

Directiory listing enabled in Node ecstatic. !/usr/bin/env python3 -- coding: utf-8 -- """Directiory listing enabled in Node ecstatic.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Node ecstatic Directory Listing...

JFrog Login Panel - Detect

JFrog login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """JFrog login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'JFrog Login Panel - Detect', 'description': 'JFrog login...

Froxlor < 0.10.38.2. - HTML Injection Detection

HTML Injection in GitHub repository froxlor/froxlor prior to 0.10.38.2. !/usr/bin/env python3 -- coding: utf-8 -- """HTML Injection in GitHub repository froxlor/froxlor prior to 0.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: inf...

IBM BigFix Platform - Information Disclosure Detection

IBM BigFix Platform 9.2 and 9.5 contains an information disclosure vulnerability caused by not enabling authenticated access in relay, letting remote attackers query and gather update and fixlet information, exploit requires no authentication. !/usr/bin/env python3 -- coding: utf-8 -- """IBM BigF...

Joomla! Component SMEStorage - Local File Inclusion Detection

A directory traversal vulnerability in the SMEStorage comsmestorage component before 1.1 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal...

WordPress enhanced-tooltipglossary 3.2.8 - Cross-Site Scripting Detection

WordPress enhanced-tooltipglossary 3.2.8 contains a reflected cross-site scripting vulnerability which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication...

Oracle GlassFish Server Open Source Edition 4.1 - Local File Inclusion Detection

Oracle GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated local file inclusion vulnerabilities that can be exploited by issuing specially crafted HTTP GET requests. !/usr/bin/env python3 -- coding: utf-8 -- """Oracle GlassFish Server Open Source Editi...

Angular JSON File Exposure Detection

Detects Angular JSON File Exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Angular JSON File Exposure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Angular JSON File Exposure Detection', 'description...

Jolokia Configuration - Exposure Detection

Detected exposed Jolokia configuration files jolokia-agent.properties and jolokia-access.xml. Exposure of these files could have revealed sensitive agent configuration, authentication credentials, or access control policies CORS, allowed MBeans. !/usr/bin/env python3 -- coding: utf-8 -- """Detect...

WordPress Plugin CodeArt Google MP3 Player - File Disclosure Download Detection

WordPress Plugin CodeArt Google MP3 Player allows an unauthenticated attacker to download file from server. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin CodeArt Google MP3 Player allows an unauthenticated attacker to download file from server.""" from kittysploit import from...

WordPress Adaptive Images < 0.6.69 - Cross-Site Scripting Detection

WordPress Adaptive Images 0.6.69 is susceptible to cross-site scripting because the plugin does not sanitize and escape the REQUESTURI before outputting it back in a page. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Adaptive Images 0.""" from kittysploit import from...

Sharp Multifunction Printers - Local File Inclusion Detection

It was observed that Sharp printers are vulnerable to a local file inclusion without authentication. Any attacker can read any file located in the printer. !/usr/bin/env python3 -- coding: utf-8 -- """It was observed that Sharp printers are vulnerable to a local file inclusion without...

WordPress WPQA <5.5 - Improper Access Control Detection

WordPress WPQA plugin before 5.5 is susceptible to improper access control. The plugin lacks authentication in a REST API endpoint. An attacker can potentially discover private questions sent between users on the site. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress WPQA plugin before 5.""...

MooSocial 3.1.8 - Cross-Site Scripting Detection

A reflected cross-site scripting XSS vulnerability exisits in multiple url of mooSocial v3.1.8 which allows attackers to steal user's session cookies and impersonate their account via a crafted URL. !/usr/bin/env python3 -- coding: utf-8 -- """A reflected cross-site scripting XSS vulnerability...

WordPress Perfect Images (WP Retina 2x) < 6.4.6 - Sensitive Information Exposure Detection

Jordy Meow Perfect Images Manage Image Sizes, Thumbnails, Replace, Retina versions up to 6.4.5 contain a vulnerability that exposes sensitive information to unauthorized actors, letting attackers access confidential data, exploit requires no specific conditions. !/usr/bin/env python3 -- coding:...

Longjing Technology BEMS API 1.21 - Unauthenticated Arbitrary File Download Detection

Longjing Technology BEMS API 1.21 is vulnerable to local file inclusion. Input passed through the fileName parameter through the downloads API endpoint is not properly verified before being used to download files. This can be exploited to disclose the contents of arbitrary and sensitive files...

Dashy <= 4.3.6 - Reflected XSS via Workspace Detection

Dashy versions up to 4.3.6 contain a reflected cross-site scripting vulnerability in the workspace view. The url query parameter is passed directly to an iframe src attribute without scheme validation, allowing an attacker to inject javascript: URIs that execute arbitrary JavaScript in the contex...

Jira Unauthenticated Dashboards Detection

Detects Jira Unauthenticated Dashboards. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Jira Unauthenticated Dashboards.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Jira Unauthenticated Dashboards Detection...

Froxlor Server Management - Cross-Site Scripting Detection

Froxlor Server Management is susceptible to cross-site scripting via clicking the forgot password link. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials...