Winstone Servlet Engine Detection

Detected servers running the Winstone Servlet Engine via the Server or X-Powered-By headers. !/usr/bin/env python3 -- coding: utf-8 -- """Detected servers running the Winstone Servlet Engine via the Server or X-Powered-By headers.""" import re from kittysploit import from...

SquirrelMail Login Panel - Detect

SquirrelMail login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SquirrelMail login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SquirrelMail Login Panel - Detect',...

Tolgee API - Detect

Tolgee API was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Tolgee API was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tolgee API - Detect', 'description': 'Tolgee API was detected.', 'author'...

UrBackup Panel - Detect

Detects UrBackup Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects UrBackup Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'UrBackup Panel - Detect', 'description': 'Detects UrBacku...

Wagtail Login - Detect

The Wagtail panel has been detected. !/usr/bin/env python3 -- coding: utf-8 -- """The Wagtail panel has been detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Wagtail Login - Detect', 'description': 'The...

Westermo Industrial Router - Login Panel Detection

Westermo industrial router web interface panel has been detected. !/usr/bin/env python3 -- coding: utf-8 -- """Westermo industrial router web interface panel has been detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

BGP Detection

The remote host is running BGP, a popular routing protocol. This indicates that the remote host is probably a network router. !/usr/bin/env python3 -- coding: utf-8 -- """The remote host is running BGP, a popular routing protocol.""" import socket from kittysploit import from...

vsFTPd Service - Detect

vsFTPd FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """vsFTPd FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'vsFTPd Service - Detect',...

Polyfill.io - Backdoor Detection

The polyfill.io CDN was suspected to serve malware. Note: it's not exploitable anymore !/usr/bin/env python3 -- coding: utf-8 -- """The polyfill.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Polyfill.io ...

Project Insight Login Panel - Detect

Project Insight login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Project Insight login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Project Insight Login Panel - Detect',...

PRONOTE Login Panel - Detect

PRONOTE products was detected. !/usr/bin/env python3 -- coding: utf-8 -- """PRONOTE products was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PRONOTE Login Panel - Detect', 'description': 'PRONOTE produc...

qdPM 9.2 - DB Credentials Exposure Detection

qdPM 9.2 database credentials were discovered. !/usr/bin/env python3 -- coding: utf-8 -- """qdPM 9.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'qdPM 9.2 - DB Credentials Exposure Detection', 'description': 'qdPM...

QuickCMS Installation Wizard Detection

PMM is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """PMM is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

RoboMongo Credential - Exposure Detection

A MongoDB credentials file used by RoboMongo was detected. !/usr/bin/env python3 -- coding: utf-8 -- """A MongoDB credentials file used by RoboMongo was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Rundeck Login Panel - Detect

Rundeck login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Rundeck login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Rundeck Login Panel - Detect', 'description': 'Rundeck...

Slocum Fleet Mission Control Login Panel - Detect

Slocum Fleet Mission Control login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Slocum Fleet Mission Control login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Slocum Fleet...

Klog Server Panel - Detect

Klog Server panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Klog Server panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Klog Server Panel - Detect', 'description': 'Klog Serve...

Micro Focus iPrint Appliance - Detect

Micro Focus iPrint Appliance was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Micro Focus iPrint Appliance was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Micro Focus iPrint Appliance - Detect...

MongoDB Ops Manager Login Panel - Detect

MongoDB Ops Manager login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """MongoDB Ops Manager login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MongoDB Ops Manager Login Panel...

Publicly accessible NPM Log file Detection

NPM log file is exposed to external users. !/usr/bin/env python3 -- coding: utf-8 -- """NPM log file is exposed to external users.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Publicly accessible NPM Log file...

OcoMon Login Panel - Detect

a tiny helpdesk system written in php !/usr/bin/env python3 -- coding: utf-8 -- """a tiny helpdesk system written in php.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OcoMon Login Panel - Detect',...

HighMail Admin Login Panel - Detect

HighMail admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """HighMail admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HighMail Admin Login Panel - Detect',...

HP Color LaserJet Detection

HP color laserJet panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """HP color laserJet panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HP Color LaserJet Detection', 'description': 'H...

Kedacom Network Keyboard Console - Arbitrary File Read Detection

There is an arbitrary file reading vulnerability in the KEDACOM network keyboard console. Attacking this vulnerability can read arbitrary information from the server !/usr/bin/env python3 -- coding: utf-8 -- """There is an arbitrary file reading vulnerability in the KEDACOM network keyboard...

LinShare Login Panel - Detect

LinShare login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """LinShare login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LinShare Login Panel - Detect', 'description':...

Matrix Server Detect

Detects Matrix servers based on .well-known entries. See https://en.wikipedia.org/wiki/Matrixprotocol !/usr/bin/env python3 -- coding: utf-8 -- """Detects Matrix servers based on .""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Mitel NuPoint Unified Messaging Panel - Detect

Mitel NuPoint Unified Messaging login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Mitel NuPoint Unified Messaging login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Mitel...

Moodle Changelog File Detect

Moodle has a file which describes API changes in core libraries and APIs, and can be used to discover Moodle version. !/usr/bin/env python3 -- coding: utf-8 -- """Moodle has a file which describes API changes in core libraries and APIs, and can be used to discover Moodle v.""" from kittysploit...

Netsparker Enterprise Installer Detection

Netsparker Enterprise is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Netsparker Enterprise is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclien...

OpenVas Login Panel - Detect

An OpenVas Admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An OpenVas Admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OpenVas Login Panel - Detect',...

Joplin Server Login - Panel Detection

Joplin Server login panel detected. !/usr/bin/env python3 -- coding: utf-8 -- """Joplin Server login panel detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Joplin Server Login - Panel Detection',...

Lansweeper Login Panel - Detect

Lansweeper login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Lansweeper login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Lansweeper Login Panel - Detect', 'description':...

LUA Runtime Error - Page Detection

Detects LUA Runtime Error - Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects LUA Runtime Error - Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LUA Runtime Error - Page Detection', 'description':...

LuCi Login Panel - Detect

LuCi login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """LuCi login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LuCi Login Panel - Detect', 'description': 'LuCi login panel...

Smoothwall Firewall - Login Panel Detection

Smoothwall is a UK-based firewall and web filtering appliance commonly deployed in schools, local authorities, and enterprises for internet safety and network security management. !/usr/bin/env python3 -- coding: utf-8 -- """Smoothwall is a UK-based firewall and web filtering appliance commonly...

SonicWall Management Admin Login Panel - Detect

SonicWall Management admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SonicWall Management admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SonicWall...

elFinder 2.1.58 - Remote Code Execution Detection

elFinder 2.1.58 is impacted by multiple remote code execution vulnerabilities that could allow an attacker to execute arbitrary code and commands on the server hosting the elFinder PHP connector, even with minimal configuration. !/usr/bin/env python3 -- coding: utf-8 -- """elFinder 2.""" from...

Wordpress Brandfolder - Remote/Local File Inclusion Detection

WordPress Brandfolder allows remote attackers to access arbitrary files that reside on the local and remote server and disclose their content. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Brandfolder allows remote attackers to access arbitrary files that reside on the local and remote...

WWBN AVideo 11.6 - Cross-Site Scripting Detection

WWBN AVideo 11.6 contains a cross-site scripting vulnerability in the footer alerts functionality via the 'success' parameter, which is inserted into the document with insufficient sanitization. !/usr/bin/env python3 -- coding: utf-8 -- """WWBN AVideo 11.""" from kittysploit import from...

LabKey Server Login Panel - Detect

LabKey Server login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """LabKey Server login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LabKey Server Login Panel - Detect',...

Slims CMS - Detect

Detects Senayan Library Management System SLiMS CMS !/usr/bin/env python3 -- coding: utf-8 -- """Detects Senayan Library Management System SLiMS CMS.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Slims CMS - Detect...

Jabber XMPP Protocol - Detect

Jabber XMPP protocol was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Jabber XMPP protocol was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'Jabber XMPP Protocol -...

DokuWiki - Cross-Site Scripting Detection

DokuWiki through 2017-02-19b contains a cross-site scripting vulnerability in the DATEAT parameter to doku.php which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...

Asanhamayesh CMS 3.4.6 - Local File Inclusion Detection

Asanhamayesh CMS 3.4.6 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Asanhamayesh CMS 3.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Asanhamayesh CMS 3.4.6 - Local...

uDraw <3.3.3 - Local File Inclusion Detection

uDraw before 3.3.3 does not validate the url parameter in its udrawconverturltobase64 AJAX action available to both unauthenticated and authenticated users before using it in the filegetcontents function and returning its content base64 encoded in the response. As a result, unauthenticated users...

WordPress Sniplets <=1.2.2 - Cross-Site Scripting Detection

WordPress Sniplets 1.1.2 and 1.2.2 plugin contains a cross-site scripting vulnerability which allows remote attackers to inject arbitrary web script or HTML via the text parameter to warning.php, notice.php, and inset.php in view/sniplets/, and possibly modules/execute.php; via the url parameter ...

CouchDB Admin Default - Detect

CouchDB is susceptible to requests in the context of an admin user. !/usr/bin/env python3 -- coding: utf-8 -- """CouchDB is susceptible to requests in the context of an admin user.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: inf...

nopCommerce Installer - Detect

nopCommerce installer panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """nopCommerce installer panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'nopCommerce Installer - Detect',...

DXPlanning Panel - Detect

DXPlanning was detected. !/usr/bin/env python3 -- coding: utf-8 -- """DXPlanning was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'DXPlanning Panel - Detect', 'description': 'DXPlanning was detected.',...

Adobe Connect Central Version Detection

Detects Adobe Connect Central Version. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Adobe Connect Central Version.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Adobe Connect Central Version Detection',...