Mezzanine CMS - Detect

Detects instances of Mezzanine CMS based on unique fingerprints and identifiers. !/usr/bin/env python3 -- coding: utf-8 -- """Detects instances of Mezzanine CMS based on unique fingerprints and identifiers.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Janitza GridVis Energy Management - Detect

Janitza GridVis is an energy monitoring and management software platform by Janitza Electronics GmbH. It provides real-time power quality analysis, energy data logging, and grid visualisation for industrial facilities. !/usr/bin/env python3 -- coding: utf-8 -- """Janitza GridVis is an energy...

Laravel Sanctum - Stateful Domain CSRF Misconfiguration Detection

Laravel Sanctum's SPA authentication uses cookie-based session authentication for first-party single-page applications. The /sanctum/csrf-cookie endpoint issues XSRF-TOKEN cookies to requesting origins. When SANCTUMSTATEFULDOMAINS is misconfigured with wildcard or overly permissive values, the...

ArGoSoft FTP Service - Detect

ArGoSoft FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ArGoSoft FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'ArGoSoft FTP Service -...

Testignore - File Disclosure Detection

Detected that the .testignore file was publicly accessible, potentially revealing the project structure, sensitive file paths, and internal directory organization. !/usr/bin/env python3 -- coding: utf-8 -- """Detected that the .""" import re from kittysploit import from...

Apache NiFi - Information Disclosure Detection

Apache NiFi 1.10.0 through 2.0.0 are missing fine-grained authorization checking for Parameter Contexts, referenced Controller Services, and referenced Parameter Providers, when creating new Process Groups. Creating a new Process Group can include binding to a Parameter Context, but in cases wher...

WordPress The Plus Addons for Elementor <4.1.12 - Cross-Site Scripting Detection

WordPress The Plus Addons for Elementor plugin before 4.1.12 is susceptible to cross-site scripting. The plugin does not properly sanitize some of its fields in the heplusmorepost AJAX action, which is exploitable by both unauthenticated and authenticated users. An attacker can inject arbitrary...

TYPO3 Installer Detection

TYPO3 is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """TYPO3 is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Phoenix Framework - Open Redirect Detection

Phoenix Framework versions 1.0.0 through 1.0.4, 1.1.0 through 1.1.6, 1.2.0, 1.2.2 and 1.3.0-rc.0 contain an open redirect vulnerability, which may result in phishing or social engineering attacks. !/usr/bin/env python3 -- coding: utf-8 -- """Phoenix Framework versions 1.""" import re from...

Micro Focus Operations Bridge Manager <=2020.05 - Remote Code Execution Detection

Micro Focus Operations Bridge Manager in versions 2020.05 and below is vulnerable to remote code execution via UCMDB. The vulnerability allows remote attackers to execute arbitrary code on affected installations of Data Center Automation. An attack requires network access and authentication as a...

Bitrix24 <=20.0.0 - Cross-Site Scripting Detection

The Web Application Firewall in Bitrix24 up to and including 20.0.0 allows XSS via the itemsITEMSID parameter to the components/bitrix/mobileapp.list/ajax.php/ URI. !/usr/bin/env python3 -- coding: utf-8 -- """The Web Application Firewall in Bitrix24 up to and including 20.""" from kittysploit...

Zoho ManageEngine ADSelfService Plus <=6103 - Cross-Site Scripting Detection

Zoho ManageEngine ADSelfService Plus 6103 and prior contains a reflected cross-site scripting vulnerability on the loadframe page. !/usr/bin/env python3 -- coding: utf-8 -- """Zoho ManageEngine ADSelfService Plus 6103 and prior contains a reflected cross-site scripting vulnerability on.""" from...

Manage Cabinet Register - Exposed Detection

The path to the Cabinet Storage is omniapp/pages/cabinet/managecabinet.jsf?Action=1. If exposed, it gives an attacker insight into information such as Storage Volume Name, Cabinet Name, it's alias, Deployed AppServer IP Address and Port !/usr/bin/env python3 -- coding: utf-8 -- """The path to the...

MetaView Explorer Installer Detection

MetaView Explorer is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """MetaView Explorer is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import...

OKIOK S-Filer Portal Login Panel - Detect

OKIOK S-Filer Portal login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """OKIOK S-Filer Portal login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OKIOK S-Filer Portal Login...

activecollab detect

Detects activecollab detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects activecollab detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'activecollab detect', 'description': 'Detects activecollab...

AMPPS Admin Login Panel Detection

An AMPPS Admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An AMPPS Admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AMPPS Admin Login Panel Detection',...

SuperAGI Panel - Detect

SuperAGI panel was detected. SuperAGI was an open-source autonomous AI agent platform that enables building, managing, and running AI agents. Exposed instances may allow unauthorized access to agent configurations and execution environments. !/usr/bin/env python3 -- coding: utf-8 -- """SuperAGI...

H3C Server - Unauthenticated Access Detection

H3C server was able to be accessed with no authentication requirements in place. !/usr/bin/env python3 -- coding: utf-8 -- """H3C server was able to be accessed with no authentication requirements in place.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Winstone Servlet Engine Detection

Detected servers running the Winstone Servlet Engine via the Server or X-Powered-By headers. !/usr/bin/env python3 -- coding: utf-8 -- """Detected servers running the Winstone Servlet Engine via the Server or X-Powered-By headers.""" import re from kittysploit import from...

Wiren Board WebUI Panel - Detect

Wiren Board WebUI panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Wiren Board WebUI panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Wiren Board WebUI Panel - Detect', 'description...

SquirrelMail Login Panel - Detect

SquirrelMail login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SquirrelMail login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SquirrelMail Login Panel - Detect',...

Tolgee API - Detect

Tolgee API was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Tolgee API was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tolgee API - Detect', 'description': 'Tolgee API was detected.', 'author'...

UrBackup Panel - Detect

Detects UrBackup Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects UrBackup Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'UrBackup Panel - Detect', 'description': 'Detects UrBacku...

Wagtail Login - Detect

The Wagtail panel has been detected. !/usr/bin/env python3 -- coding: utf-8 -- """The Wagtail panel has been detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Wagtail Login - Detect', 'description': 'The...

Westermo Industrial Router - Login Panel Detection

Westermo industrial router web interface panel has been detected. !/usr/bin/env python3 -- coding: utf-8 -- """Westermo industrial router web interface panel has been detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

WordPress Exposed Installation Detection

Wordpress installation files have been detected !/usr/bin/env python3 -- coding: utf-8 -- """Wordpress installation files have been detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WordPress Exposed...

BGP Detection

The remote host is running BGP, a popular routing protocol. This indicates that the remote host is probably a network router. !/usr/bin/env python3 -- coding: utf-8 -- """The remote host is running BGP, a popular routing protocol.""" import socket from kittysploit import from...

vsFTPd Service - Detect

vsFTPd FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """vsFTPd FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'vsFTPd Service - Detect',...

Polyfill.io - Backdoor Detection

The polyfill.io CDN was suspected to serve malware. Note: it's not exploitable anymore !/usr/bin/env python3 -- coding: utf-8 -- """The polyfill.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Polyfill.io ...

Project Insight Login Panel - Detect

Project Insight login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Project Insight login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Project Insight Login Panel - Detect',...

PRONOTE Login Panel - Detect

PRONOTE products was detected. !/usr/bin/env python3 -- coding: utf-8 -- """PRONOTE products was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PRONOTE Login Panel - Detect', 'description': 'PRONOTE produc...

qdPM 9.2 - DB Credentials Exposure Detection

qdPM 9.2 database credentials were discovered. !/usr/bin/env python3 -- coding: utf-8 -- """qdPM 9.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'qdPM 9.2 - DB Credentials Exposure Detection', 'description': 'qdPM...

QuickCMS Installation Wizard Detection

PMM is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """PMM is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

RoboMongo Credential - Exposure Detection

A MongoDB credentials file used by RoboMongo was detected. !/usr/bin/env python3 -- coding: utf-8 -- """A MongoDB credentials file used by RoboMongo was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Rundeck Login Panel - Detect

Rundeck login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Rundeck login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Rundeck Login Panel - Detect', 'description': 'Rundeck...

Samba Config - Detect

Samba configuration information was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Samba configuration information was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Samba Config - Detect',...

Slocum Fleet Mission Control Login Panel - Detect

Slocum Fleet Mission Control login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Slocum Fleet Mission Control login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Slocum Fleet...

Klog Server Panel - Detect

Klog Server panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Klog Server panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Klog Server Panel - Detect', 'description': 'Klog Serve...

KNIME Server / Business Hub WebPortal - Detect

KNIME Server and its successor KNIME Business Hub, a commercial platform from KNIME AG for deploying, executing, and managing data-science and machine learning workflows built in the KNIME Analytics Platform, was detected. An exposed WebPortal login page was identified, including...

Micro Focus iPrint Appliance - Detect

Micro Focus iPrint Appliance was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Micro Focus iPrint Appliance was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Micro Focus iPrint Appliance - Detect...

MongoDB Ops Manager Login Panel - Detect

MongoDB Ops Manager login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """MongoDB Ops Manager login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MongoDB Ops Manager Login Panel...

Publicly accessible NPM Log file Detection

NPM log file is exposed to external users. !/usr/bin/env python3 -- coding: utf-8 -- """NPM log file is exposed to external users.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Publicly accessible NPM Log file...

OcoMon Login Panel - Detect

a tiny helpdesk system written in php !/usr/bin/env python3 -- coding: utf-8 -- """a tiny helpdesk system written in php.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OcoMon Login Panel - Detect',...

osTicket Installer Panel - Detect

osTicket installer panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """osTicket installer panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'osTicket Installer Panel - Detect',...

HighMail Admin Login Panel - Detect

HighMail admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """HighMail admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HighMail Admin Login Panel - Detect',...

HP Color LaserJet Detection

HP color laserJet panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """HP color laserJet panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HP Color LaserJet Detection', 'description': 'H...

Kedacom Network Keyboard Console - Arbitrary File Read Detection

There is an arbitrary file reading vulnerability in the KEDACOM network keyboard console. Attacking this vulnerability can read arbitrary information from the server !/usr/bin/env python3 -- coding: utf-8 -- """There is an arbitrary file reading vulnerability in the KEDACOM network keyboard...

LinShare Login Panel - Detect

LinShare login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """LinShare login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LinShare Login Panel - Detect', 'description':...

Matrix Server Detect

Detects Matrix servers based on .well-known entries. See https://en.wikipedia.org/wiki/Matrixprotocol !/usr/bin/env python3 -- coding: utf-8 -- """Detects Matrix servers based on .""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...