Nacos - Information Disclosure Detection

Nacos unauthorized download of configuration information. !/usr/bin/env python3 -- coding: utf-8 -- """Nacos unauthorized download of configuration information.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Nacos -...

PMB v7.4.1 - Cross Site Scripting Detection

PMB v7.4.1 allow attacker to inject arbitrary malicious HTML or Javascripts code in user web browser via nosearch parameter !/usr/bin/env python3 -- coding: utf-8 -- """PMB v7.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Ymhome-detect

Detects Ymhome-detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Ymhome-detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ymhome-detect', 'description': 'Detects Ymhome-detect.', 'author': 'KittySplo...

FUXA 1.3.0 - Unauthenticated ICS/SCADA Project Data Disclosure Detection

FUXA v1.3.0 exposes full SCADA/HMI project configuration via GET /api/project without authentication, even when secureEnabled is true. The secureFnc middleware auto-generates a valid guest JWT when no token is provided, bypassing authentication. Exposed data includes server-side scripts, device...

Seowon 130-SLC router - Remote Code Execution Detection

Seowon 130-SLC router lets remote attackers execute commands without authentication as admin users via the router ip & Portif available in the request. !/usr/bin/env python3 -- coding: utf-8 -- """Seowon 130-SLC router lets remote attackers execute commands without authentication as admin users v...

Environment Ruby File Disclosure Detection

Ruby environment file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Ruby environment file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Environment Ruby File Disclosure Detection',...

Forgejo Repositories - Exposure Detection

The Forgejo repo is being exposed publically. !/usr/bin/env python3 -- coding: utf-8 -- """The Forgejo repo is being exposed publically.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Forgejo Repositories - Exposure...

WAMP Xdebug - Detect

WAMP Xdebug was detected. !/usr/bin/env python3 -- coding: utf-8 -- """WAMP Xdebug was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WAMP Xdebug - Detect', 'description': 'WAMP Xdebug was detected.',...

Graphql Tartiflette Detect

Detects Graphql Tartiflette Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Graphql Tartiflette Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.scanner.http.probeguard import isspacatchall class ModuleScanner, Httpclient: info = 'name'...

Tinyproxy - Detect

Lightweight HTTP/HTTPS proxy daemon for POSIX operating systems !/usr/bin/env python3 -- coding: utf-8 -- """Lightweight HTTP/HTTPS proxy daemon for POSIX operating systems.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

ZITADEL Panel - Detect

Detected ZITADEL was an open-source identity infrastructure platform providing OIDC, OAuth 2.0, SAML and machine-user IAM. !/usr/bin/env python3 -- coding: utf-8 -- """Detected ZITADEL was an open-source identity infrastructure platform providing OIDC, OAuth 2.""" from kittysploit import from...

DoorGets CMS v7.0 - Information Disclosure Detection

doorGets 7.0 has a sensitive information disclosure vulnerability in /setup/temp/admin.php. A remote unauthenticated attacker could exploit this vulnerability to obtain administrator's password. !/usr/bin/env python3 -- coding: utf-8 -- """doorGets 7.""" from kittysploit import from...

Netsweeper 4.0.9 - Open Redirect Detection

Netsweeper 4.0.9 contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """Netsweeper 4.""" import re from kittysploit...

Gradio - Open Redirect Detection

An open redirect vulnerability in Gradio allows attackers to craft malicious URLs that redirect users to external, potentially harmful sites without proper validation. !/usr/bin/env python3 -- coding: utf-8 -- """An open redirect vulnerability in Gradio allows attackers to craft malicious URLs th...

Dozzle - Logs Exposure Detection

Dozzle is a small lightweight application with a web based interface to monitor Docker logs. It doesn’t store any log files. It is for live monitoring of your container logs only. !/usr/bin/env python3 -- coding: utf-8 -- """Dozzle is a small lightweight application with a web based interface to...

OpenSIS Login Panel - Detect

OpenSIS login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """OpenSIS login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OpenSIS Login Panel - Detect', 'description': 'OpenSIS...

TeslaMate - Unauthenticated Access Detection

A misconfig in Teslamate allows unauthorized access to /settings endpoint. !/usr/bin/env python3 -- coding: utf-8 -- """A misconfig in Teslamate allows unauthorized access to /settings endpoint.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Voilà Panel - Detect

Voilà is an open-source tool that turns Jupyter Notebooks into standalone web applications. It is commonly used to share AI/ML dashboards and interactive data science tools. !/usr/bin/env python3 -- coding: utf-8 -- """Voilà is an open-source tool that turns Jupyter Notebooks into standalone web...

Apache NiFi - Unauthenticated Access Detection

Apache NiFi server was able to be accessed because no authentication was required. !/usr/bin/env python3 -- coding: utf-8 -- """Apache NiFi server was able to be accessed because no authentication was required.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

etcd Unauthenticated HTTP API Leak Detection

etcd HTTP API is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """etcd HTTP API is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'etcd Unauthenticated HTTP API Leak Detection', 'description': 'etcd HTT...

AfterLogic WebMail Login Panel - Detect

AfterLogic WebMail Login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """AfterLogic WebMail Login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AfterLogic WebMail Login Panel -...

Craft CMS - Log File Disclosure Detection

Detected exposed Craft CMS log files due to misconfiguration, allowing unauthenticated access to sensitive information including error messages, stack traces, database queries, and potentially credentials or session data. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed Craft CMS log...

Personal FTP Service - Detect

Personal FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Personal FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'Personal FTP Service -...

Checkmk Agent Info Disclosure Detection

The Checkmk agent had exposed sensitive system information on TCP port 6556 without requiring authentication. !/usr/bin/env python3 -- coding: utf-8 -- """The Checkmk agent had exposed sensitive system information on TCP port 6556 without requiring authentication.""" import socket from kittysploi...

EventON <= 2.1 - Missing Authorization Detection

The EventON WordPress plugin before 2.1.2 lacks authentication and authorization in its eventonicsdownload ajax action, allowing unauthenticated visitors to access private and password protected Events by guessing their numeric id. !/usr/bin/env python3 -- coding: utf-8 -- """The EventON WordPres...

WordPress Plugin Uploader 1.0.4 - Cross-Site Scripting Detection

Multiple cross-site scripting vulnerabilities in views/notify.php in the Uploader plugin 1.0.4 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 notify or 2 blog parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Multiple cross-site scripting vulnerabiliti...

Emby Installation Page - Exposure Detection

Checks for the presence of a Emby Installer Page. !/usr/bin/env python3 -- coding: utf-8 -- """Checks for the presence of a Emby Installer Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Emby Installation Page ...

SUNGROW Logger1000 Panel - Detect

SUNGROW Solar Energy Inverter Monitoring Devices Logger1000 panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SUNGROW Solar Energy Inverter Monitoring Devices Logger1000 panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

ThinkPHP 5.0.1 - Remote Code Execution Detection

ThinkPHP 5.0.1 allows remote unauthenticated attackers to execute arbitrary code via the 's' parameter. !/usr/bin/env python3 -- coding: utf-8 -- """ThinkPHP 5.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ThinkPH...

Joomla! Component com_janews - Local File Inclusion Detection

A directory traversal vulnerability in the JA News comjanews component 1.0 for Joomla! allows remote attackers to read arbitrary local files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the JA News...

AMPPS by Softaculous Panel - Directory Listing - Detect

AMPPS by Softaculous panel directory listing was detected. !/usr/bin/env python3 -- coding: utf-8 -- """AMPPS by Softaculous panel directory listing was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AMPPS...

RDWeb RemoteApp and Desktop Connections - Web Access Detection

RDWeb RemoteApp and Desktop Connections does not display. !/usr/bin/env python3 -- coding: utf-8 -- """RDWeb RemoteApp and Desktop Connections does not display.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'RDWeb...

IceWarp WebMail 11.4.5.0 - Cross-Site Scripting Detection

IceWarp WebMail 11.4.5.0 is vulnerable to cross-site scripting via the language parameter. !/usr/bin/env python3 -- coding: utf-8 -- """IceWarp WebMail 11.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'IceWarp...

Joomla! Plugin Core Design Scriptegrator - Local File Inclusion Detection

A directory traversal vulnerability in plugins/system/cdscriptegrator/libraries/highslide/js/jsloader.php in the Core Design Scriptegrator plugin 1.4.1 for Joomla! allows remote attackers to read, and possibly include and execute, arbitrary files via directory traversal sequences in the files...

Atlantis Panel - Detect

Atlantis panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Atlantis panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Atlantis Panel - Detect', 'description': 'Atlantis panel was...

SSH Known Hosts File - Detect

SSH known hosts file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SSH known hosts file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SSH Known Hosts File - Detect', 'description': 'SSH...

Splunk Enterprise Login Panel - Detect

Splunk Enterprise login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Splunk Enterprise login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Splunk Enterprise Login Panel -...

HPE AutoPass License Server - Panel Detection

Detected an exposed HPE AutoPass License Server web interface on the default HTTPS port 5814 by probing the /autopass endpoint. !/usr/bin/env python3 -- coding: utf-8 -- """Detected an exposed HPE AutoPass License Server web interface on the default HTTPS port 5814 by probing the .""" from...

Oracle HTTPServer12c Detection

Detects Oracle HTTPServer12c. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Oracle HTTPServer12c.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Oracle HTTPServer12c Detection', 'description': 'Detects Oracle...

Verizon Router Panel - Detect

Verizon router panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Verizon router panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Verizon Router Panel - Detect', 'description': 'Veriz...

Laravel Pulse - Unauthenticated Dashboard Access Detection

Laravel Pulse monitoring dashboard is accessible without authentication. Pulse displays server performance metrics, slow queries, user activity, cache hit rates, and exception logs that could aid attackers in reconnaissance. !/usr/bin/env python3 -- coding: utf-8 -- """Laravel Pulse monitoring...

NETGEAR WAC124 - Authentication Bypass Detection

NETGEAR WAC124 AC2000 routers contain an authentication bypass vulnerability. An attacker can gain access by bypassing proper authentication, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 --...

3CX Management Console - Local File Inclusion Detection

3CX Management Console is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """3CX Management Console is vulnerable to local file inclusion.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

ACME mini_httpd <1.30 - Local File Inclusion Detection

ACME minihttpd before 1.30 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """ACME minihttpd before 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ACME minihttpd 1.30 -...

Nginx UI Panel - Detect

Nginx UI panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Nginx UI panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Nginx UI Panel - Detect', 'description': 'Nginx UI panel was...

WordPress Plugin MF Gig Calendar 0.9.2 - Cross-Site Scripting Detection

A cross-site scripting vulnerability in the MF Gig Calendar plugin 0.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the query string to the calendar page. !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting vulnerability in the MF Gig Calendar...

Tongda OA Meeting - Unauthorized Access Detection

Tongda Meeting Unauthorized Access were Detected. !/usr/bin/env python3 -- coding: utf-8 -- """Tongda Meeting Unauthorized Access were Detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tongda OA Meeting -...

Detect Terraform Provider

Write Infrastructure as Code - https://www.terraform.io/ !/usr/bin/env python3 -- coding: utf-8 -- """Write Infrastructure as Code - https://www.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect Terraform...

Apache ShenYu Admin JWT - Authentication Bypass Detection

Apache ShenYu 2.3.0 and 2.4.0 allow Admin access without proper authentication. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Apache ShenYu 2.""" from kittysploit import from lib.protocols.http.httpclient...

Joomla jMarket 5.15 - Cross-Site Scripting Detection

The attacker can send to victim a link containing a malicious URL in an email or instant message can perform a wide variety of actions, such as stealing the victim's session token or login credentials. !/usr/bin/env python3 -- coding: utf-8 -- """The attacker can send to victim a link containing ...