PyPICloud Login Panel - Detect

PyPLCloud login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """PyPLCloud login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PyPICloud Login Panel - Detect', 'description':...

Tongda OA v2014 Get Contactlistt - Sensitive Information Disclosure Detection

There is an information leakage vulnerability in the getcontactlist.php file of Tongda OA v2014. Attackers can obtain sensitive information through the vulnerability and conduct further attacks. !/usr/bin/env python3 -- coding: utf-8 -- """There is an information leakage vulnerability in the...

Kentico Xperience 13 CMS - Staging None-password Authentication Bypass

Kentico Staging SyncServer None-type password handling auth bypass WT-2025-0006. !/usr/bin/env python3 -- coding: utf-8 -- """Kentico Xperience 13 CMS - Staging None-password Authentication Bypass""" import secrets from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

IP Webcam Viewer Page - Detect

Searches for exposed webcams by querying the endpoint and the existence of IP Webcam in the body. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for exposed webcams by querying the endpoint and the existence of IP Webcam in the body.""" from kittysploit import from...

TurboCRM - Cross-Site Scripting Detection

TurboCRM contains a cross-site scripting vulnerability which allows a remote attacker to inject arbitrary JavaScript into the response returned by the application. !/usr/bin/env python3 -- coding: utf-8 -- """TurboCRM contains a cross-site scripting vulnerability which allows a remote attacker to...

QlikView AccessPoint Login Panel - Detect

QlikView AccessPoint login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """QlikView AccessPoint login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'QlikView AccessPoint Login...

Admin Menu Editor - Full Path Disclosure Detection

Admin Menu Editor WordPress plugin contains a full path disclosure vulnerability due to improper access restrictions in its source files, allowing unauthenticated attackers to retrieve full server paths and aiding exploitation. !/usr/bin/env python3 -- coding: utf-8 -- """Admin Menu Editor...

Microsoft .NET Remoting httpd - Detect

Microsoft .NET Remoting httpd was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Microsoft .""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'Microsoft .NET Remoting httpd -...

TOTOLink Router - Remote Command Execution Detection

TOTOLink routers are vulnerable to unauthenticated remote command execution via the /boaform/formWsc endpoint. An attacker can inject OS commands through the localPin parameter. !/usr/bin/env python3 -- coding: utf-8 -- """TOTOLink routers are vulnerable to unauthenticated remote command executio...

Sitecore version detection

Detects Sitecore version detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Sitecore version detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sitecore version detection', 'description': 'Detect...

Symantec PGP Global Directory Panel - Detect

Symantec PGP Global Directory panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Symantec PGP Global Directory panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Symantec PGP Global...

Zimbra Collaboration Suite < 8.8.15 - Improper Encoding Detection

An issue was discovered in the Calendar feature in Zimbra Collaboration Suite 8.8.x before 8.8.15 patch 30 update 1, as exploited in the wild starting in December 2021. An attacker could place HTML containing executable JavaScript inside element attributes. This markup becomes unescaped, causing...

Zimbra Collaboration (ZCS) - Cross Site Scripting Detection

A reflected cross-site scripting XSS vulnerability in the /public/launchNewWindow.jsp component of Zimbra Collaboration aka ZCS 9.0 allows unauthenticated attackers to execute arbitrary web script or HTML via request parameters. !/usr/bin/env python3 -- coding: utf-8 -- """A reflected cross-site...

u5cms v8.3.5 - Open Redirect Detection

u5cms version 8.3.5 contains a URL redirection vulnerability that can cause a user's browser to be redirected to another site via /loginsave.php. !/usr/bin/env python3 -- coding: utf-8 -- """u5cms version 8.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Symmetricom SyncServer Unauthenticated - Remote Command Execution Detection

Microchip Technology Microsemi SyncServer S650 was discovered to contain a command injection vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """Microchip Technology Microsemi SyncServer S650 was discovered to contain a command injection vulnerability.""" import re from kittysploit import...

kkFileView 4.1.0 - Cross-Site Scripting Detection

kkFileView 4.1.0 contains multiple cross-site scripting vulnerabilities via the errorMsg parameter. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and...

Squidex <7.4.0 - Cross-Site Scripting Detection

Squidex before 7.4.0 contains a cross-site scripting vulnerability via the squid.svg endpoint. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site. !/usr/bin/env python3 -- coding: utf-8 --...

Gibbon v25.0.0 - Local File Inclusion Detection

Gibbon v25.0.0 is vulnerable to a Local File Inclusion LFI vulnerability where it's possible to include the content of several files present in the installation folder in the server's response. !/usr/bin/env python3 -- coding: utf-8 -- """Gibbon v25.""" from kittysploit import from...

mojoPortal v.2.7.0.0 - Cross-Site Scripting Detection

Cross Site Scripting vulnerability in mojoPortal v.2.7.0.0 allows a remote attacker to execute arbitrary code via the helpkey parameter in the Help.aspx component. !/usr/bin/env python3 -- coding: utf-8 -- """Cross Site Scripting vulnerability in mojoPortal v.""" from kittysploit import from...

WWBN AVideo 11.6 - Cross-Site Scripting Detection

A reflected XSS vulnerability exists in the functiongetOpenGraph videoName functionality of WWBN AVideo 11.6 and dev master commit 3c6bb3ff, allowing arbitrary Javascript execution. !/usr/bin/env python3 -- coding: utf-8 -- """A reflected XSS vulnerability exists in the functiongetOpenGraph...

CData Arc < 23.4.8839 - Path Traversal Detection

A path traversal vulnerability exists in the Java version of CData Arc 23.4.8839 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain access to sensitive information and perform limited actions. !/usr/bin/env python3 -- coding: utf-8 -- """A...

Xlight FTP Service Detect

The File Transfer Protocol FTP is a standard network protocol used to transfer computer files between a client and server on a computer network. !/usr/bin/env python3 -- coding: utf-8 -- """The File Transfer Protocol FTP is a standard network protocol used to transfer computer files between a...

X2 WS_FTP Service - Detect

X2 WSFTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """X2 WSFTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'X2 WSFTP Service - Detect',...

Netdata Panel - Detect

Netdata panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Netdata panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.scanner.http.probeguard import lookslikenetdatainfo, validatejsonprobe class ModuleScanner, Httpclient:...

OfficeKeeper Admin Login Panel - Detect

OfficeKeeper admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """OfficeKeeper admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OfficeKeeper Admin Login Panel -...

Office Web Apps Server Panel - Detect

Microsoft Office Web App Login Panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Microsoft Office Web App Login Panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Office Web Apps...

Onion Website Supported via Onion-Location Header Detection

Identified websites that supported Tor network access through the Onion-Location HTTP response header, which pointed to a corresponding .onion service for enhanced privacy and anonymity. !/usr/bin/env python3 -- coding: utf-8 -- """Identified websites that supported Tor network access through the...

OpenBullet 2 - Panel Detection

Openbullet was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Openbullet was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OpenBullet 2 - Panel Detection', 'description': 'Openbullet was detected....

openDCIM - Detect

openDCIM is a web-based data centre infrastructure management application. !/usr/bin/env python3 -- coding: utf-8 -- """openDCIM is a web-based data centre infrastructure management application.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

OpenEMR Setup Installation Page - Exposure Detection

Detects exposed OpenEMR setup installation pages which could allow unauthorized access or information disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed OpenEMR setup installation pages which could allow unauthorized access or information disclosu.""" from kittysploit import...

Openfire Admin Console Login Panel - Detect

Openfire Admin Console login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Openfire Admin Console login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Openfire Admin Console...

OpenResty detection

Some deployments of OpenResty spill their version numbers. !/usr/bin/env python3 -- coding: utf-8 -- """Some deployments of OpenResty spill their version numbers.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Open Web Analytics Login - Detect

Detects the presence of Open Web Analytics login page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of Open Web Analytics login page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Open Web...

Opto 22 groov - Panel Detection

Opto 22 groov is an IIoT and industrial automation platform providing browser-based HMI and edge computing capabilities. The groov View and groov Admin interfaces allow control of industrial devices and data acquisition systems. Exposed instances may provide unauthenticated access to industrial...

Oracle EBS SQL Log - Exposure Detection

Detected exposure of the sqlnet.log file in Oracle E-Business Suite EBS, which often contained sensitive information such as database connection details, TNS entries, usernames, and error logs. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposure of the sqlnet.""" from kittysploit impor...

OVPN Configuration Download Page - Detect

OVPS configuration download page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """OVPS configuration download page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OVPN Configuration Download...

OXF Phishing as a Service Panel - Detect

OXF Phishing as a Service Panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """OXF Phishing as a Service Panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OXF Phishing as a Service...

Pagespeed Global Admin - Detect

Pagespeed Global Admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Pagespeed Global Admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pagespeed Global Admin - Detect',...

Pair Drop Panel - Detect

Local file sharing in your browser. Inspired by Apple's AirDrop. Fork of Snapdrop. !/usr/bin/env python3 -- coding: utf-8 -- """Local file sharing in your browser.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pair...

Panmicro E-Mobile System - Arbitrary File Read Detection

The Panmicro E-Mobile client/cdnfile interface has an arbitrary file reading vulnerability. Unauthenticated attackers can use this vulnerability to read important system files, database configuration files, and so on. !/usr/bin/env python3 -- coding: utf-8 -- """The Panmicro E-Mobile client/cdnfi...

Pantheon upstream.yml Disclosure Detection

Public Pantheon YAML Configuration Files might include sensitive info !/usr/bin/env python3 -- coding: utf-8 -- """Public Pantheon YAML Configuration Files might include sensitive info.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient...

Paystack Secret/Live Key - Exposure Detection

Detected exposed Paystack secret keys test or live found in application source code, configuration files, or client-side assets. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed Paystack secret keys test or live found in application source code, configuration files, or.""" import re...

pCOWeb Panel - Detect

Detects pCOWeb Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects pCOWeb Panel - Detect.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'pCOWeb Panel - Detect', 'description': 'Detects...

Persis Panel - Detect

Persis panel was detected, !/usr/bin/env python3 -- coding: utf-8 -- """Persis panel was detected,.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Persis Panel - Detect', 'description': 'Persis panel was detected,',...

PgHero Dashboard Exposure Panel - Detect

PgHero Dashboard Exposure panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """PgHero Dashboard Exposure panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PgHero Dashboard Exposure Panel...

Phoronix Test Suite Panel - Detect

Phoronix Test Suite panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Phoronix Test Suite panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Phoronix Test Suite Panel -...

phpspec Config - Detect

phpspec configuration information was detected. !/usr/bin/env python3 -- coding: utf-8 -- """phpspec configuration information was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'phpspec Config - Detect',...

phpSysInfo Exposure Detection

phpSysInfo: a customizable PHP script that displays information about your system nicely !/usr/bin/env python3 -- coding: utf-8 -- """phpSysInfo: a customizable PHP script that displays information about your system nicely.""" from kittysploit import from lib.protocols.http.httpclient import...

Php Debug Bar - Exposure Detection

The DebugBar integrates easily into projects and can display profiling data from any part of your application.This template detects exposed PHP Debug Bars by looking for known response bodies and the phpdebugbar-id in headers. !/usr/bin/env python3 -- coding: utf-8 -- """The DebugBar integrates...

PHP Detect

Detects PHP Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects PHP Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PHP Detect', 'description': 'Detects PHP Detect.', 'author': 'KittySploit Team',...