Casdoor get-users Account Password Disclosure Detection

Casdoor get-users Account Password is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Casdoor get-users Account Password is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Casdoor get-users Account...

WordPress Flow-Flow Social Stream <=3.0.71 - Cross-Site Scripting Detection

WordPress Flow-Flow Social Stream 3.0.7.1 and prior is vulnerable to cross-site scripting. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Flow-Flow Social Stream 3.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Arbitrary File Read in Dev Mode - Nuxt.js Detection

Vite is misconfigured within nuxt to permit any file to be retrieved from the file system. !/usr/bin/env python3 -- coding: utf-8 -- """Vite is misconfigured within nuxt to permit any file to be retrieved from the file system.""" import re from kittysploit import from lib.protocols.http.httpclien...

Detect Graylog REST API

Detects Detect Graylog REST API. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Detect Graylog REST API.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect Graylog REST API', 'description': 'Detects Detect...

ASP.NET Trace.AXD - Exposure Detection

ASP.NET Trace.AXD information was exposed. !/usr/bin/env python3 -- coding: utf-8 -- """ASP.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ASP.NET Trace.AXD - Exposure Detection', 'description': 'ASP.NET Trace.AXD...

Hikvision - Authentication Bypass Detection

Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125, DS-2CD4x2xFWD Series V5.2.0 build 140721 to V5.4.0 Build 160414, DS-2CD4xx5 Series V5.2.0...

HIKVISION iSecure Center - Remote Code Execution Detection

Hikvision's comprehensive security management platform has a Fastjson remote command execution vulnerability, which can execute system commands and obtain system permissions and sensitive data information of the target server. !/usr/bin/env python3 -- coding: utf-8 -- """Hikvision's comprehensive...

WordPress Plugin Uploader 1.0.4 - Cross-Site Scripting Detection

Multiple cross-site scripting vulnerabilities in views/notify.php in the Uploader plugin 1.0.4 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 notify or 2 blog parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Multiple cross-site scripting vulnerabiliti...

Yoast SEO 16.7-17.2 - Information Disclosure Detection

Yoast SEO plugin 16.7 to 17.2 is susceptible to information disclosure, The plugin discloses the full internal path of featured images in posts via the wp/v2/posts REST endpoints, which can help an attacker identify other vulnerabilities or help during the exploitation of other identified...

Lighttpd Config File - File Disclosure Detection

Lighttpd Config file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Lighttpd Config file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Lighttpd Config File - File Disclosure Detection',...

Wordpress directory listing Detection

Directory listing enabled in wordpress. !/usr/bin/env python3 -- coding: utf-8 -- """Directory listing enabled in wordpress.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Wordpress directory listing Detection',...

Joomla! Component com_gcalendar Suite 2.1.5 - Local File Inclusion Detection

A directory traversal vulnerability in the GCalendar comgcalendar component 2.1.5 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal...

Reolink Panel - Detect

Reolink panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Reolink panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Reolink Panel - Detect', 'description': 'Reolink panel was...

TIBCO Jaspersoft Login Panel - Detect

TIBCO Jaspersoft login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """TIBCO Jaspersoft login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'TIBCO Jaspersoft Login Panel - Detect...

Fortra FileCatalyst - Anonymous Access Detection

Detects Fortra FileCatalyst web interfaces that allow anonymous or guest access. FileCatalyst is a managed file transfer solution, and anonymous access to its portal can expose sensitive files and configuration if not properly secured. This template checks for publicly accessible instances with...

AVTECH Video Surveillance Product - Unauthenticated File Download Detection

AVTECH video surveillance products unauthenticated file download from web root through /cgi-bin/cgibox, Since the .cab string is verified by the strstr method, the file download can be realized by adding ?.cab at the end of the file name. !/usr/bin/env python3 -- coding: utf-8 -- """AVTECH video...

DokuWiki - Cross-Site Scripting Detection

DokuWiki through 2017-02-19b contains a cross-site scripting vulnerability in the DATEAT parameter to doku.php which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...

vRealize Log Insight - Panel Detect

Detect vRealize Log Insight login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Detect vRealize Log Insight login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'vRealize Log...

Dolibarr Unauthenticated Contacts Database Theft Detection

An issue in Dolibarr 16 before 16.0.5 allows unauthenticated attackers to perform a database dump and access a company's entire customer file, prospects, suppliers, and employee information if a contact file exists. !/usr/bin/env python3 -- coding: utf-8 -- """An issue in Dolibarr 16 before 16.""...

FUXA 1.3.0 - Unauthenticated ICS/SCADA Project Data Disclosure Detection

FUXA v1.3.0 exposes full SCADA/HMI project configuration via GET /api/project without authentication, even when secureEnabled is true. The secureFnc middleware auto-generates a valid guest JWT when no token is provided, bypassing authentication. Exposed data includes server-side scripts, device...

Securepoint UTM - Leaking Remote Memory Contents Detection

An issue was discovered in SecurePoint UTM before 12.2.5.1. The firewall's endpoint at /spcgi.cgi allows information disclosure of memory contents to be achieved by an authenticated user. Essentially, uninitialized data can be retrieved via an approach in which a sessionid is obtained but not use...

TOTOLINK Installer - Exposure Detection

Detects the presence of TOTOLINK router setup pages at /wizardset.htm and /easysetup.htm. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of TOTOLINK router setup pages at /wizardset.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Time Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Remote Code Execution Detection

The Time Clock plugin and Time Clock Pro plugin for WordPress are vulnerable to Remote Code Execution in versions up to, and including, 1.2.2 for Time Clock and 1.1.4 for Time Clock Pro via the 'etimeclockwploadfunctioncallback' function. This allows unauthenticated attackers to execute code on t...

elFinder <=2.1.12 - Local File Inclusion Detection

elFinder through 2.1.12 is vulnerable to local file inclusion via Connector.minimal.php in std42. This allows unauthenticated remote attackers to read, write, and browse files outside the configured document root. This is due to improper handling of absolute file paths. !/usr/bin/env python3 --...

IceWarp Webmail Server v10.2.1 - Cross Site Scripting Detection

Icewarp Icearp v10.2.1 was discovered to contain a cross-site scripting XSS vulnerability via the color parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Icewarp Icearp v10.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info...

Fides Privacy Center ≤ 2.39.1 - Server-Side URL Disclosure Detection

Fides versions 2.19.0 to before 2.39.2rc0 contain an information disclosure caused by unauthenticated HTTP GET request to the Privacy Center, letting attackers access the SERVERSIDEFIDESAPIURL, which may reveal server configuration details, exploit requires no authentication. !/usr/bin/env python...

Roundcube CVE-2025-49113 Detection

Fingerprints Roundcube via rcversion and flags builds before 1.5.10 / 1.6.x before 1.6.11 as vulnerable to post-auth PHP deserialization RCE. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Roundcube versions vulnerable to CVE-2025-49113.""" from kittysploit import from...

Oracle WebCenter Sites Detection

Detects Oracle WebCenter Sites. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Oracle WebCenter Sites.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Oracle WebCenter Sites Detection', 'description': 'Detects...

WordPress UpdraftPlus - Full Path Disclosure Detection

WordPress Plugin UpdraftPlus files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin UpdraftPlus files are publicly accessible without...

Botpress Admin Panel - Detect

Botpress admin panel was detected. Botpress is an open-source conversational AI platform for building chatbots and virtual assistants. !/usr/bin/env python3 -- coding: utf-8 -- """Botpress admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Ngrok Status Page Detection

Ngrok is a popular platform that provides secure tunnels to localhost, allowing users to expose a local web server to the internet.The Ngrok status page is a web page that provides real-time information about the health and performance of the Ngrok service. !/usr/bin/env python3 -- coding: utf-8 ...

Weaviate Console - Detect

Detected Weaviate Console interface. Weaviate was open-source vector database that stores data objects and vector embeddings for AI applications. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Weaviate Console interface.""" from kittysploit import from lib.protocols.http.httpclient import...

Mapproxy - Detect

Checks for a running MapProxy instance and obtain version number. Also checks if the demo page is enabled. MapProxy is an open source proxy for geospatial data. It caches, accelerates and transforms data from existing map services and serves any desktop or web GIS client. !/usr/bin/env python3 --...

Haproxy Config - File Disclosure Detection

Haproxy Config file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Haproxy Config file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Haproxy Config - File Disclosure Detection', 'description':...

Cargo Lock Packages Disclosure Detection

Detects Cargo Lock Packages Disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Cargo Lock Packages Disclosure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cargo Lock Packages Disclosure Detection',...

Pritunl - Panel Detection

Realtime website and application monitoring tool !/usr/bin/env python3 -- coding: utf-8 -- """Realtime website and application monitoring tool.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pritunl - Panel...

Netdata Dashboard Panel - Detect

Netdata Dashboard panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Netdata Dashboard panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Netdata Dashboard Panel - Detect', 'description...

Mastodon Prototype Pollution Vulnerability Detection

The GitHub repository mastodon/mastodon prior to 3.5.0 contains a Prototype Pollution vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """The GitHub repository mastodon/mastodon prior to 3.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner...

aiohttp - Directory Traversal Detection

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. When using aiohttp as a web server and configuring static routes, it is necessary to specify the root path for static files. Additionally, the option 'followsymlinks' can be used to determine whether to follow symboli...

Kiteworks PCN Panel - Detect

Kiteworks PCN Login Panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Kiteworks PCN Login Panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kiteworks PCN Panel - Detect', 'description...

WordPress True Ranker <2.2.4 - Local File Inclusion Detection

WordPress True Ranker before version 2.2.4 allows sensitive configuration files such as wp-config.php, to be accessed via the src parameter found in the /admin/vendor/datatables/examples/resources/examples.php file via local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress...

Ntopng Authentication Bypass Detection

Ntopng, a passive network monitoring tool, contains an authentication bypass vulnerability in ntopng = 4.2 !/usr/bin/env python3 -- coding: utf-8 -- """Ntopng, a passive network monitoring tool, contains an authentication bypass vulnerability in ntopng = 4.""" from kittysploit import from...

Check Point Quantum Gateway - Information Disclosure Detection

Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available. !/usr/bin/env python3 -- coding: utf-8 -...

Digital Rebar - Local File Inclusion Detection

Digital Rebar versions 4.3.0, 4.3.2, 4.3.3, 4.4.0, and maybe others are vulnerable to local file inclusion because web requests can navigate outside of DRP controlled areas. !/usr/bin/env python3 -- coding: utf-8 -- """Digital Rebar versions 4.""" import re from kittysploit import from...

Oxid EShop Installer Exposure Detection

Oxid EShop is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Oxid EShop is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Sophos Mobile Panel - Detect

Sophos Mobile panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Sophos Mobile panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sophos Mobile Panel - Detect', 'description': 'Sophos...

HPE System Management - Cross-Site Scripting Detection

HPE System Management contains a cross-site scripting vulnerability which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other...

Cisco Meraki Cloud Security Appliance Panel - Detect

Cisco Meraki Cloud Security Appliance panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Cisco Meraki Cloud Security Appliance panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cisco...

WordPress 15Zine <3.3.0 - Cross-Site Scripting Detection

WordPress 15Zine before 3.3.0 is vulnerable to reflected cross-site scripting because the theme does not sanitize the cbi parameter before including it in the HTTP response via the cbsa AJAX action. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress 15Zine before 3.""" from kittysploit import...

HP LaserJet Professional Panel - Detect

HP LaserJet Professional panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """HP LaserJet Professional panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HP LaserJet Professional Panel -...