NI Web-based Configuration & Monitoring - Detect

Detects NI Web-based Configuration & Monitoring - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects NI Web-based Configuration & Monitoring - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'NI...

Nordex Control Wind Farm Portal Login Panel - Detect

Nordex Control Wind Farm Portal login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Nordex Control Wind Farm Portal login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Nordex...

NSQ Admin Panel - Detect

NSQ admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """NSQ admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'NSQ Admin Panel - Detect', 'description': 'NSQ admin panel was...

ntop Network Traffix Exposed Detection

Detects ntop Network Traffix Exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Detects ntop Network Traffix Exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ntop Network Traffix Exposed Detection',...

Triton Inference Server - Detect

Detected the NVIDIA Triton Inference Server, an open-source platform for serving AI/ML models. It supported multiple frameworks and exposed HTTP/gRPC endpoints for high-performance inferencing. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the NVIDIA Triton Inference Server, an open-sourc...

Eclipse Jetty - Directory Listing Enabled Detection

Eclipse Jetty server has directory listing enabled, which exposes the directory structure and file names to unauthenticated users. This can reveal sensitive files, backup files, configuration files, and aid attackers in reconnaissance. !/usr/bin/env python3 -- coding: utf-8 -- """Eclipse Jetty...

jfa-go Setup Page - Exposure Detection

Detects exposed jfa-go Setup page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed jfa-go Setup page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'jfa-go Setup Page - Exposure Detection', 'description...

Atlassian JIRA Setup - Installer Detection

Atlassian JIRA is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Atlassian JIRA is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import...

Joomla! htaccess file disclosure Detection

Joomla! has an htaccess file to store configurations about HTTP config, directory listing, etc. !/usr/bin/env python3 -- coding: utf-8 -- """Joomla! has an htaccess file to store configurations about HTTP config, directory listing, etc.""" from kittysploit import from lib.protocols.http.httpclien...

Joomla MarvikShop ShoppingCart 3.4 - Sql Injection Detection

Joomla MarvikShop ShoppingCart 3.4 is vulnerable to SQL injection which is a code injection technique that might destroy your database. SQL injection is one of the most common web hacking techniques. SQL injection is the placement of malicious code in SQL statements, via web page input...

jotty·page Login - Panel Detect

jotty·page login interface was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """jotty·page login interface was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'jotty·page Login - Panel Detect',...

JsAPI Ticket Json Detection

JsAPI Ticket internal file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """JsAPI Ticket internal file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'JsAPI Ticket Json Detection', 'description':...

Jupyter Lab - Unauthenticated Access Detection

JupyterLab was able to be accessed without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """JupyterLab was able to be accessed without authentication.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Jupyt...

KACO New Energy Solar Inverter - Detect

KACO new energy is a solar inverter manufacturer. Their inverters include a built-in web server that serves compressed HTML over HTTP for monitoring inverter status and energy production data. Devices are commonly deployed on residential and commercial solar installations. !/usr/bin/env python3 -...

Kafka Operation API - Cluster Detection

Kafka Operation API Cluster page was detected and appeared to be accessible without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Kafka Operation API Cluster page was detected and appeared to be accessible without authentication.""" from kittysploit import from...

Khodrochi CMS - Cross Site Scripting Detection

A cross site scripting vulnerability was found in the Khodrochi.ir CMS an Iranian Car Services Platform. !/usr/bin/env python3 -- coding: utf-8 -- """A cross site scripting vulnerability was found in the Khodrochi.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Khoj - Detect

Khoj was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Khoj was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Khoj - Detect', 'description': 'Khoj was detected.', 'author': 'KittySploit Team',...

KNR Author List Widget - Cross-site Scripting Detection

KNR Author List Widget suffers from Cross-site Scripting XSS in the listItem parameter. !/usr/bin/env python3 -- coding: utf-8 -- """KNR Author List Widget suffers from Cross-site Scripting XSS in the listItem parameter.""" from kittysploit import from lib.protocols.http.httpclient import...

Kodbox Installation Page - Exposure Detection

Kodbox is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Kodbox is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

KodExplorer-detect

Detects KodExplorer-detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects KodExplorer-detect.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'KodExplorer-detect', 'description': 'Detects...

Kubeflow Katib Panel - Detect

Kubeflow Katib, a Kubernetes-native project for automated machine learning AutoML that performs hyperparameter tuning, early stopping, and neural architecture search, was detected. Its web UI is normally served under the /katib/ path behind the Kubeflow Central Dashboard, fronted by an Istio/OIDC...

Kubeflow Pipelines Panel - Detect

Kubeflow Pipelines is an open-source platform for building and deploying portable, scalable ML workflows. It provides a web UI for managing ML pipelines, experiments, and runs on Kubernetes. !/usr/bin/env python3 -- coding: utf-8 -- """Kubeflow Pipelines is an open-source platform for building an...

Laravel Login - Panel Detection

A Laravel login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """A Laravel login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Laravel Login - Panel Detection', 'description': 'A...

Lexmark Device Detect

Detects Lexmark Device Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Lexmark Device Detect.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Lexmark Device Detect', 'description': 'Detects...

LimeSurvey Survey Software - Detect

Limesurvey is the number one open-source survey software. Advanced features like branching and multiple question types make it a valuable partner for survey-creation. !/usr/bin/env python3 -- coding: utf-8 -- """Limesurvey is the number one open-source survey software.""" from kittysploit import...

Listmonk Installer Exposure Detection

Listmonk is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Listmonk is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

LMSZAI Installer Exposure Detection

LMSZAI is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """LMSZAI is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

LocalAI - Detect

An instance running LocalAI was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An instance running LocalAI was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LocalAI - Detect', 'description': 'An...

LoLLMS WebUI - Detect

An instance running LoLLMS WebUI was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An instance running LoLLMS WebUI was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LoLLMS WebUI - Detect',...

Loytec Device Info Detection

Loytec Device info panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Loytec Device info panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Loytec Device Info Detection', 'description':...

LVM Exporter Metrics Detection

LVM Exporter Metrics is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """LVM Exporter Metrics is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LVM Exporter Metrics Detection', 'description': 'LVM...

Mage AI Panel - Detect

Mage AI mage.ai / github.com/mage-ai/mage-ai is an open-source data pipeline + orchestration platform with a notebook-style UI. Self-hosted instances default to TCP 6789 and historically have shipped without authentication. Exposed instances may reveal pipeline source, secrets, and provide an...

MAGMI (Magento Mass Importer) Plugin Detect

Detects MAGMI Magento Mass Importer Plugin Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects MAGMI Magento Mass Importer Plugin Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MAGMI Magento Mass...

Mako Runtime Error - Page Detection

Detects Mako Runtime Error - Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Mako Runtime Error - Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Mako Runtime Error - Page Detection', 'description':...

MaxKB Panel - Detect

MaxKB, an open-source RAG-based knowledge base and LLM chatbot platform, was detected. !/usr/bin/env python3 -- coding: utf-8 -- """MaxKB, an open-source RAG-based knowledge base and LLM chatbot platform, was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclien...

Meilisearch - Detect

An open-source, blazingly fast, and hyper-relevant search engine that will improve your search experience. !/usr/bin/env python3 -- coding: utf-8 -- """An open-source, blazingly fast, and hyper-relevant search engine that will improve your search experience.""" from kittysploit import from...

Memos Panel - Detect

Memos is a privacy-first, lightweight note-taking service !/usr/bin/env python3 -- coding: utf-8 -- """Memos is a privacy-first, lightweight note-taking service.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Memos...

MobileIron Login Panel - Detect

MobileIron login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """MobileIron login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MobileIron Login Panel - Detect', 'description':...

Microsoft FrontPage Configuration - Exposure Detection

Microsoft FrontPage Server Extensions configuration files were accessible, exposing version details, directory paths, and other configurations. This was a common misconfiguration on old 2000s IIS servers with FrontPage Server Extensions installed. !/usr/bin/env python3 -- coding: utf-8 --...

Nacos 1.x - Authentication Bypass Detection

Nacos 1.x was discovered. A default Nacos instance needs to modify the application.properties configuration file or add the JVM startup variable Dnacos.core.auth.enabled=true to enable the authentication function reference: https://nacos.io/en-us/docs/auth.html. But authentication can still be...

Netdisco - Unauth Access Detection

Detects an unauth dashboard access of Netdisco. !/usr/bin/env python3 -- coding: utf-8 -- """Detects an unauth dashboard access of Netdisco.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Netdisco - Unauth Access...

NETGEAR Routers - Serial Number Disclosure Detection

Multiple NETGEAR router models disclose their serial number which can be used to obtain the admin password if password recovery is enabled. !/usr/bin/env python3 -- coding: utf-8 -- """Multiple NETGEAR router models disclose their serial number which can be used to obtain the admin password if ."...

Netis E1+ V1.2.32533 - WiFi Password Disclosure Detection

A vulnerability in Netis allows remote unauthenticated users to disclose the WiFi password of the remote device. !/usr/bin/env python3 -- coding: utf-8 -- """A vulnerability in Netis allows remote unauthenticated users to disclose the WiFi password of the remote devic.""" from kittysploit import...

NetMizer LogManagement System Data - Directory Exposure Detection

Directory Exposure vulnerability in the NetMizer log management system of Beijing Lingzhou Network Technology Co., Ltd. Due to the loose control of /data, attackers can use this vulnerability to obtain sensitive information. !/usr/bin/env python3 -- coding: utf-8 -- """Directory Exposure...

NetScaler Console - Panel Detection

NetScaler Console login panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """NetScaler Console login panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'NetScaler Console - Panel...

Nginx Proxy Manager Login Panel - Detect

Nginx Proxy Manager login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Nginx Proxy Manager login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Nginx Proxy Manager Login Panel...

Detect Node Exporter Metrics

Information Disclosure of Garbage Collection !/usr/bin/env python3 -- coding: utf-8 -- """Information Disclosure of Garbage Collection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect Node Exporter Metrics',...

NPort Web Console Login Panel - Detect

NPort Web Console login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """NPort Web Console login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'NPort Web Console Login Panel -...

Nokia Nuage Networks VSP - Dashboard Panel Detection

Nokia Nuage Networks VSP Virtualized Services Platform is a software-defined networking platform for enterprise and service provider SDN/NFV deployments. The web dashboard is exposed on ports 8443, 9090, or 11443. !/usr/bin/env python3 -- coding: utf-8 -- """Nokia Nuage Networks VSP Virtualized...

NUUO NVRmini 2 3.0.8 - Local File Inclusion Detection

NUUO NVRmini 2 3.0.8 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """NUUO NVRmini 2 3.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'NUUO NVRmini 2 3.0.8 - Local File Inclusion...