vBulletin - Open Redirect Detection

vBulletin 3.x.x and 4.2.x through 4.2.5 contains an open redirect vulnerability via the redirector.php URL parameter. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding...

Modular DS - Broken Access Control

Modular Connector login endpoint issues wordpressloggedin cookie without auth. !/usr/bin/env python3 -- coding: utf-8 -- """Modular DS - Broken Access Control""" import secrets from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Oauth Credentials Json Detection

Oauth Credentials file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Oauth Credentials file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Oauth Credentials Json Detection', 'description':...

FortiClient Endpoint Management Server Panel - Detect

Detects FortiClient Endpoint Management Server Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects FortiClient Endpoint Management Server Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name'...

Microsoft SharePoint - Site Pages Disclosure Detection

Microsoft SharePoint Site Pages library /SitePages/ is accessible without proper authentication, exposing site content, page structure, and potentially sensitive information. The Site Pages library contains modern SharePoint pages .aspx files !/usr/bin/env python3 -- coding: utf-8 -- """Microsoft...

TinaCMS - Path Traversal Detection

TinaCMS CLI 2.1.8 contains a file system read vulnerability caused by disabled Vite server.fs.strict setting, letting unauthenticated attackers read arbitrary files on the host system, exploit requires access to the dev server. !/usr/bin/env python3 -- coding: utf-8 -- """TinaCMS CLI 2.""" from...

Eclipse Jetty <9.2.9.v20150224 - Sensitive Information Leakage Detection

Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header. !/usr/bin/env python3 -- coding: utf-8 -- """Eclipse Jetty before 9.""" from kittysploit import from lib.protocols.http.httpclient import...

Jira Unauthenticated Admin Projects Detection

Detects Jira Unauthenticated Admin Projects. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Jira Unauthenticated Admin Projects.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Jira Unauthenticated Admin Projec...

AEM UserInfo Servlet Credentials Exposure Detection

Adobe Experience Manager UserInfoServlet is exposed which allows an attacker to bruteforce credentials. You can get valid usernames from jcr:createdBy, jcr:lastModifiedBy, cq:LastModifiedBy attributes of any JCR node. !/usr/bin/env python3 -- coding: utf-8 -- """Adobe Experience Manager...

Fork CMS - Installer Detection

Fork CMS installer page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Fork CMS installer page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Fork CMS - Installer Detection', 'description':...

Kettle Panel - Detect

Kettle panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Kettle panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kettle Panel - Detect', 'description': 'Kettle panel was detected.',...

COMMAX Smart Home Ruvie CCTV Bridge DVR - RTSP Credentials Disclosure Detection

The COMMAX CCTV Bridge for the DVR service allows an unauthenticated attacker to disclose real time streaming protocol RTSP credentials in plain-text. !/usr/bin/env python3 -- coding: utf-8 -- """The COMMAX CCTV Bridge for the DVR service allows an unauthenticated attacker to disclose real time...

Triofox - Improper Access Control Detection

The Gladinet Triofox solution before 12.91.1126.65588 and CentreStack before 12.10.595.65696 allow unauthenticated access to the /management/admindatabase.aspx endpoint, exposing sensitive database management functionality to anyone with network access. An unauthenticated attacker can remotely...

Ecology - Local File Inclusion Detection

Ecology is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Ecology is vulnerable to local file inclusion.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ecology - Local File Inclusio...

WooCommerce Designer Pro <= 1.9.28 - Arbitrary File Read Detection

WooCommerce Designer Pro theme for WordPress = 1.9.28 contains an arbitrary file read vulnerability caused by improper input validation, letting unauthenticated attackers read arbitrary files including sensitive configuration files, exploit requires no authentication. !/usr/bin/env python3 --...

Clockwork PHP page exposure Detection

Clockwork php page was exposed, which allows admins to profile and debug the application, view database queries, HTTP requests, and other details right from the browser's developer tools. !/usr/bin/env python3 -- coding: utf-8 -- """Clockwork php page was exposed, which allows admins to profile a...

Wildfly - Default Admin Login Detection

Wildfly default admin login credentials were successful. !/usr/bin/env python3 -- coding: utf-8 -- """Wildfly default admin login credentials were successful.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Wildfly -...

Webkul QloApps 1.6.0 - Cross-site Scripting Detection

An unauthenticated Cross-Site Scripting XSS vulnerability found in Webkul QloApps 1.6.0 allows an attacker to obtain a user's session cookie and then impersonate that user via POST controller parameter. !/usr/bin/env python3 -- coding: utf-8 -- """An unauthenticated Cross-Site Scripting XSS...

XAMPP Environment Variables Exposure Detection

printenv.pl file is exposed in XAMPP leaking environment variables. !/usr/bin/env python3 -- coding: utf-8 -- """printenv.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'XAMPP Environment Variables Exposure...

SCIMono <0.0.19 - Remote Code Execution Detection

SCIMono before 0.0.19 is vulnerable to remote code execution because it is possible for an attacker to inject and execute java expressions and compromise the availability and integrity of the system. !/usr/bin/env python3 -- coding: utf-8 -- """SCIMono before 0.""" from kittysploit import from...

Repetier Server Panel - Detect

Repetier Server login panel detected. !/usr/bin/env python3 -- coding: utf-8 -- """Repetier Server login panel detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Repetier Server Panel - Detect', 'description':...

FortiRecorder Panel - Detect

FortiRecorder Panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """FortiRecorder Panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'FortiRecorder Panel - Detect', 'description':...

Detect Redmine CLI Configuration File

A small command-line utility to interact with Redmine - https://pypi.org/project/Redmine-CLI/ !/usr/bin/env python3 -- coding: utf-8 -- """A small command-line utility to interact with Redmine - https://pypi.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Visual Studio Code Directories - Detect

Visual Studio Code directories were detected. !/usr/bin/env python3 -- coding: utf-8 -- """Visual Studio Code directories were detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Visual Studio Code Directories ...

Apache OFBiz - XML External Entity Injection Detection

The /webtools/control/xmlrpc endpoint in OFBiz XML-RPC event handler is exposed to External Entity Injection by passing DOCTYPE declarations with executable payloads that discloses the contents of files in the filesystem. In addition, it can also be used to probe for open network ports, and figur...

Springboot Env Actuator - Detect

Sensitive environment variables may not be masked !/usr/bin/env python3 -- coding: utf-8 -- """Sensitive environment variables may not be masked.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.scanner.http.probeguard import validatespringjsonprobe from...

WordPress API Bearer Auth <20190907 - Cross-Site Scripting Detection

WordPress API Bearer Auth plugin before 20190907 contains a cross-site scripting vulnerability. The server parameter is not correctly filtered in swagger-config.yaml.php. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress API Bearer Auth plugin before 20190907 contains a cross-site scripting...

SECUI WAF Panel - Detect

SECUI WAF panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SECUI WAF panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.osint.faviconhash import shodanmmh3 class ModuleScanner, Httpclient: info = 'name': 'SECUI WAF Panel -...

VectorAdmin Panel - Detect

VectorAdmin panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """VectorAdmin panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'VectorAdmin Panel - Detect', 'description': 'VectorAdmi...

CMSimple - Detect

Detects the presence of CMSimple, a simple content management system that requires no database flat-file. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of CMSimple, a simple content management system that requires no database flat-file.""" import re from kittysploit import fro...

Avaya Aura Communication Manager Login - Panel Detect

Avaya Aura Communication Manager login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Avaya Aura Communication Manager login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Avaya...

Cassia Bluetooth Gateway Panel - Detect

Cassia Bluetooth Gateway Management Platform login page was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Cassia Bluetooth Gateway Management Platform login page was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Drawio <18.1.2 - Server-Side Request Forgery Detection

Drawio before 18.1.2 is susceptible to server-side request forgery via the /service endpoint in jgraph/drawio. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site. !/usr/bin/env python3 --...

n8n Webhooks - Remote Code Execution Detection

n8n is an open source workflow automation platform. Versions starting with 1.65.0 and below 1.121.0 enable an attacker to access files on the underlying server through execution of certain form-based workflows. A vulnerable workflow could grant access to an unauthenticated remote attacker,...

Crystal Live HTTP Server 6.01 - Local File Inclusion Detection

Crystal Live HTTP Server 6.01 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Crystal Live HTTP Server 6.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Crystal Live HTTP Server...

IceWarp - Open Redirect Detection

IceWarp open redirect vulnerabilities were detected. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """IceWarp open redirect vulnerabilities were...

WordPress Product Slider Pro - Supply Chain Backdoor RCE

Compromised Product Slider Pro builds execute attacker-controlled expressions via X-Cache-Status/X-Cache-Key headers. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Product Slider Pro for WooCommerce - Supply Chain Backdoor RCE""" import base64 import secrets from kittysploit import from...

LotusCMS 3.0 - Remote Code Execution Detection

LotusCMS 3.0 is susceptible to remote code execution via the Router function. This is done by embedding PHP code in the 'page' parameter, which will be passed to a eval call and allow remote code execution. !/usr/bin/env python3 -- coding: utf-8 -- """LotusCMS 3.""" from kittysploit import from...

Openfire Administration Console - Authentication Bypass Detection

Openfire is an XMPP server licensed under the Open Source Apache License. Openfire's administrative console, a web-based application, was found to be vulnerable to a path traversal attack via the setup environment. This permitted an unauthenticated user to use the unauthenticated Openfire Setup...

UVDesk Helpdesk Installation Page - Exposure Detection

Detects exposed UVDesk Helpdesk Installation page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed UVDesk Helpdesk Installation page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'UVDesk Helpdesk...

Microsoft SharePoint - Layouts Disclosure Detection

Detected exposed SharePoint Layouts endpoints. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed SharePoint Layouts endpoints.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Microsoft SharePoint - Layout...

Sitecore version detection

Detects Sitecore version detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Sitecore version detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sitecore version detection', 'description': 'Detect...

WordPress Active Products Tables for WooCommerce <1.0.5 - Cross-Site Scripting Detection

WordPress Active Products Tables for WooCommerce plugin prior to 1.0.5 contains a cross-site scripting vulnerability.. The plugin does not sanitize and escape a parameter before outputting it back in the response of an AJAX action, An attacker can inject arbitrary script in the browser of an...

Ruijie Login Panel - Detect

Ruijie login panel was detected and leaks authentication credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Ruijie login panel was detected and leaks authentication credentials.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Woodpecker CI Panel - Detect

Woodpecker CI panel was detected. Woodpecker is a community fork of Drone CI, providing a simple yet powerful continuous integration platform. !/usr/bin/env python3 -- coding: utf-8 -- """Woodpecker CI panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import...

Hongfan OA udfmr.asmx - SQL injection Detection

There is a SQL injection vulnerability in Hongfan iOffice 10 Hospital Edition, which can be exploited by attackers to obtain sensitive database information. !/usr/bin/env python3 -- coding: utf-8 -- """There is a SQL injection vulnerability in Hongfan iOffice 10 Hospital Edition, which can be...

Moodle Changelog File Detect

Moodle has a file which describes API changes in core libraries and APIs, and can be used to discover Moodle version. !/usr/bin/env python3 -- coding: utf-8 -- """Moodle has a file which describes API changes in core libraries and APIs, and can be used to discover Moodle v.""" from kittysploit...

3CX Phone System Management Console - Panel Detect

3CX Phone System Management Console panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """3CX Phone System Management Console panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': '3CX Phone...

AEM MergeMetadataServlet Detection

Detects AEM MergeMetadataServlet. !/usr/bin/env python3 -- coding: utf-8 -- """Detects AEM MergeMetadataServlet.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AEM MergeMetadataServlet Detection', 'description':...

Lokomedia CMS - Local File Inclusion Detection

A Local File Inclusion LFI vulnerability exists in Lokomedia CMS. The application allows an attacker to include files on the server that should not be accessible, potentially exposing sensitive information. !/usr/bin/env python3 -- coding: utf-8 -- """A Local File Inclusion LFI vulnerability exis...