Tautulli - Exposed Installation Detection

Tautulli is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Tautulli is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

OpenStack User Secrets Exposure Detection

Internal usersecrets.yml file is exposed in OpenStack. !/usr/bin/env python3 -- coding: utf-8 -- """Internal usersecrets.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OpenStack User Secrets Exposure Detection',...

ViewPoint System Status Detection

ViewPoint System status page is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """ViewPoint System status page is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ViewPoint System Status Detection',...

n8n Panel - Detect

The worlds most popular workflow automation platform for technical teams !/usr/bin/env python3 -- coding: utf-8 -- """The worlds most popular workflow automation platform for technical teams.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Oracle Application Server Panel - Detect

Oracle Application Server login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Oracle Application Server login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Oracle Application...

Odoo - Database Manager Discovery Detection

Odoo database manager was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Odoo database manager was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Odoo - Database Manager Discovery Detection',...

Babel - Open Redirect Detection

Babel contains an open redirect vulnerability via redirect.php in the newurl parameter. An attacker can use any legitimate site using Babel to redirect user to a malicious site, thus possibly obtaining sensitive information, modifying data, and/or executing unauthorized operations. !/usr/bin/env...

SugarCRM Exposed Installation Detection

SugarCRM is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """SugarCRM is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Hue Personal Wireless Lighting - Detect

This template detects the presence of Hue Personal Wireless Lighting systems by looking for specific welcome messages in the response. !/usr/bin/env python3 -- coding: utf-8 -- """This template detects the presence of Hue Personal Wireless Lighting systems by looking for specific welcome m.""" fr...

WordPress Download Manager <2.9.94 - Cross-Site Scripting Detection

WordPress Download Manager plugin before 2.9.94 contains a cross-site scripting vulnerability via the category shortcode feature, as demonstrated by the orderby or searchpublishdate parameter. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Download Manager plugin before 2.""" from...

Mojoportal - Detect

Detects Mojoportal - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Mojoportal - Detect.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Mojoportal - Detect', 'description': 'Detects Mojoporta...

SolarWinds ARM (Access Rights Manager) - Detect

SolarWinds ARM login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SolarWinds ARM login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SolarWinds ARM Access Rights Manager -...

Reprise License Manager 14.2 - Authentication Bypass Detection

Reprise License Manager RLM 14.2 does not verify authentication or authorization and allows unauthenticated users to change the password of any existing user. !/usr/bin/env python3 -- coding: utf-8 -- """Reprise License Manager RLM 14.""" from kittysploit import from lib.protocols.http.httpclient...

Adobe Experience Manager Sling User Login - Detect

Adobe Experience Manager Sling user login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Adobe Experience Manager Sling user login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Well-Known Nostr JSON Detection

Detects Nostr public key discovery JSON. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Nostr public key discovery JSON.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Well-Known Nostr JSON Detection',...

Samsung Printer Panel - Detect

Samsung printer panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Samsung printer panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Samsung Printer Panel - Detect', 'description':...

PbootCMS 2.0.7 - SQL Injection Detection

PbootCMS 2.0.7 contains a SQL injection vulnerability via pbootcms.db. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. !/usr/bin/env python3 -- coding: utf-8 -- """PbootCMS...

XWiki REST API - Attachments Disclosure Detection

A vulnerability in XWiki's REST API allows unauthenticated users to access attachments list and metadata through the attachments endpoint. This could lead to disclosure of sensitive information stored in attachments metadata. !/usr/bin/env python3 -- coding: utf-8 -- """A vulnerability in XWiki's...

AriaNg Debug Console - Exposure Detection

Detects the presence of AriaNg Debug Console exposure !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of AriaNg Debug Console exposure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AriaNg Debug...

Ruby on Rails - Accept Header LFI Detection (CVE-2019-5418)

Detects CVE-2019-5418 by sending Accept: ../../../../../../../../etc/passwd and looking for passwd contents in the response. !/usr/bin/env python3 -- coding: utf-8 -- """Rails File Content Disclosure via Accept header CVE-2019-5418.""" import re from kittysploit import from...

Live Helper Chat Detect

Detects Live Helper Chat Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Live Helper Chat Detect.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Live Helper Chat Detect', 'description': 'Detec...

Monitorr Panel - Detect

Detects Monitorr Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Monitorr Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Monitorr Panel - Detect', 'description': 'Detects Monitor...

MiniUPnPd - Detect

Detected servers using the MiniUPnPd service through the Server header. !/usr/bin/env python3 -- coding: utf-8 -- """Detected servers using the MiniUPnPd service through the Server header.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanne...

Metinfo 7.0.0 beta - SQL Injection Detection

Metinfo 7.0.0 beta is susceptible to SQL Injection in app/system/language/admin/languagegeneral.class.php via the admin/?n=language&c=languagegeneral&a=doExportPack appno parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Metinfo 7.""" from kittysploit import from lib.protocols.http.httpclie...

WordPress Page Layout builder v1.9.3 - Cross-Site Scripting Detection

WordPress plugin Page-layout-builder v1.9.3 contains a cross-site scripting vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress plugin Page-layout-builder v1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Vermeg Solife Panel - Detect

Vermeg Solife was detected - A life insurance solution with cash, tax, legal, and claims management to boost operational efficiency and ensure compliance. !/usr/bin/env python3 -- coding: utf-8 -- """Vermeg Solife was detected - A life insurance solution with cash, tax, legal, and claims manageme...

Wordpress User Enumeration Detection

This template detects user enumeration in wordpress. !/usr/bin/env python3 -- coding: utf-8 -- """This template detects user enumeration in wordpress.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Wordpre...

XWiki Platform - SQL Injection Detection

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 9.4-rc-1 through 16.10.5 and 17.0.0-rc-1 through 17.2.2, it's possible for anyone to inject SQL using the parameter sort of the getdeleteddocuments.vm. It's injected as is as an...

RaspAP 2.8.7 - Unauthenticated Command Injection Detection

A Command injection vulnerability in RaspAP 2.8.0 thru 2.8.7 allows unauthenticated attackers to execute arbitrary commands via the cfgid parameter in /ajax/openvpn/activateovpncfg.php and /ajax/openvpn/delovpncfg.php. !/usr/bin/env python3 -- coding: utf-8 -- """A Command injection vulnerability...

Chaosblade < 1.7.4 - Remote Code Execution Detection

exec.CommandContext in Chaosblade 0.3 through 1.7.3, when server mode is used, allows OS command execution via the cmd parameter without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """exec.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Crestron Device - Credentials Disclosure Detection

An issue was discovered on Crestron HD-MD4X2-4K-E 1.0.0.2159 devices. When the administrative web interface of the HDMI switcher is accessed unauthenticated, user credentials are disclosed that are valid to authenticate to the web interface. Specifically, aj.html sends a JSON document with uname...

Kestra Login - Panel Detect

Kestra login interface was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Kestra login interface was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kestra Login - Panel Detect', 'description':...

SmarterTools SmarterTrack - Cross-Site Scripting Detection

Cross-site Scripting XSS vulnerability in SmarterTools SmarterTrack This issue affects: SmarterTools SmarterTrack 100.0.8019.14010. !/usr/bin/env python3 -- coding: utf-8 -- """Cross-site Scripting XSS vulnerability in SmarterTools SmarterTrack This issue affects: SmarterTools Smarter.""" from...

AIX WebSM - Detect

Detects IBM AIX Web-based System Manager services. !/usr/bin/env python3 -- coding: utf-8 -- """Detects IBM AIX Web-based System Manager services.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info =...

BlackJumboDog FTP Service - Detect

BlackJumboDog FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """BlackJumboDog FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'BlackJumboDo...

Wordpress Profile Builder Plugin Cross-Site Scripting Detection

The Profile Builder User Profile & User Registration Forms WordPress plugin is vulnerable to cross-site scripting due to insufficient escaping and sanitization of the siteurl parameter found in the /assets/misc/fallback-page.php file which allows attackers to inject arbitrary web scripts onto a...

Laravel Ignition - Cross-Site Scripting Detection

Laravel Ignition contains a cross-site scripting vulnerability when debug mode is enabled. !/usr/bin/env python3 -- coding: utf-8 -- """Laravel Ignition contains a cross-site scripting vulnerability when debug mode is enabled.""" from kittysploit import from lib.protocols.http.httpclient import...

JK Status Manager - Detect

Exposed JKStatus manager which is a web-based tool that allows administrators to monitor and manage the connections between the Apache HTTP Server and the Tomcat application server. !/usr/bin/env python3 -- coding: utf-8 -- """Exposed JKStatus manager which is a web-based tool that allows...

Lighttpd Web Server - Detect

Detected servers running the Lighttpd web server by identifying the Server header in HTTP responses. !/usr/bin/env python3 -- coding: utf-8 -- """Detected servers running the Lighttpd web server by identifying the Server header in HTTP responses.""" from kittysploit import from...

Hikvision Panel Detection

Detects Hikvision Panel. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Hikvision Panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.osint.faviconhash import shodanmmh3 class ModuleScanner, Httpclient: info = 'name': 'Hikvision Panel Detection',...

Microweber < 1.2.11 - Open Redirection Detection

Open Redirect in Packagist microweber/microweber prior to 1.2.11. !/usr/bin/env python3 -- coding: utf-8 -- """Open Redirect in Packagist microweber/microweber prior to 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: in...

UserGate NGFW/UTM Admin Panel - Detect

Detect UserGate NGFW/UTM Admin Panel. !/usr/bin/env python3 -- coding: utf-8 -- """Detect UserGate NGFW/UTM Admin Panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'UserGate NGFW/UTM Admin Panel - Detect',...

AddPac GSM VoIP Gateway Panel - Detect

AddPac GSM VoIP Gateway panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """AddPac GSM VoIP Gateway panel was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'AddP...

GZ Forum Script 1.8 - Cross-Site Scripting Detection

Cross-site scripting XSS is an attack in which an attacker injects malicious executable scripts into the code of a trusted application or website. Attackers often initiate an XSS attack by sending a malicious link to a user and enticing the user to click it. !/usr/bin/env python3 -- coding: utf-8...

Apache Tomcat - Directory Listing Enabled Detection

Directory listing is enabled on the Apache Tomcat server, allowing users to view the contents of web directories.This could lead to unauthorized access to sensitive files and potential information disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Directory listing is enabled on the Apache...

Torrent Magnet - Detect

Detects magnet links present on a website, which are commonly used for torrenting. !/usr/bin/env python3 -- coding: utf-8 -- """Detects magnet links present on a website, which are commonly used for torrenting.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

ZEROF Web Server 2.0 - Cross-Site Scripting Detection

ZEROF Web Server 2.0 allows /admin.back cross-site scripting. !/usr/bin/env python3 -- coding: utf-8 -- """ZEROF Web Server 2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ZEROF Web Server 2.0 - Cross-Site Scripti...

Vite Dev Server - Path Traversal in Optimized Deps .map Handling Detection

Vite development server versions prior to 8.0.5, 7.3.2, and 6.4.2 are vulnerable to path traversal through the optimized dependencies sourcemap handler. The dev server's handling of .map requests for optimized dependencies resolves file paths via normalizePathpath.resolveroot, url.slice1 and call...

Lomnido Panel - Detect

Lomnido was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Lomnido was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Lomnido Panel - Detect', 'description': 'Lomnido was detected.', 'author':...

Atlassian Connect Descriptor - Detect

The app descriptor is a JSON file atlassian-connect. json that describes the app to the Atlassian application. The descriptor includes general information for the app, as well as the modules that the app wants to use or extend. !/usr/bin/env python3 -- coding: utf-8 -- """The app descriptor is a...