Firestore Public REST Access

Probe Cloud Firestore REST /v1/projects/project/databases/default/documents for anonymous list access. Project ID can be set explicitly or scraped from the target HTML/JS. !/usr/bin/env python3 -- coding: utf-8 -- """Detect unauthenticated Firestore REST document listing.""" import re from...

Forcepoint Appliance Detection

Detects Forcepoint Appliance. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Forcepoint Appliance.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Forcepoint Appliance Detection', 'description': 'Detects...

Forgejo Installation Page - Exposure Detection

Checks for the presence of a Forgejo Installer Page. !/usr/bin/env python3 -- coding: utf-8 -- """Checks for the presence of a Forgejo Installer Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Forgejo...

Fork CMS - Installer Detection

Fork CMS installer page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Fork CMS installer page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Fork CMS - Installer Detection', 'description':...

FortiAuthenticator - Detect

The FortiAuthenticator panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """The FortiAuthenticator panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'FortiAuthenticator - Detect',...

FortiClient Endpoint Management Server Panel - Detect

Detects FortiClient Endpoint Management Server Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects FortiClient Endpoint Management Server Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name'...

Fortra FileCatalyst - Anonymous Access Detection

Detects Fortra FileCatalyst web interfaces that allow anonymous or guest access. FileCatalyst is a managed file transfer solution, and anonymous access to its portal can expose sensitive files and configuration if not properly secured. This template checks for publicly accessible instances with...

Frappe Helpdesk Login Panel - Detect

Frappe Helpdesk products was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Frappe Helpdesk products was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Frappe Helpdesk Login Panel - Detect',...

FreeScout Installer Exposure Detection

FreeScout is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """FreeScout is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...

Friendica Panel - Detect

Friendica Login Panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Friendica Login Panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Friendica Panel - Detect', 'description': 'Friendic...

Gabia Server - Detection

Detects gabia web server. !/usr/bin/env python3 -- coding: utf-8 -- """Detects gabia web server.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Gabia Server - Detection', 'description': 'Detects gabia web...

Get Access Token Json Detection

Internal file is exposed in Constant Contact Forms wordpress plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Internal file is exposed in Constant Contact Forms wordpress plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

GitLab public signup Detection

Detects GitLab public signup. !/usr/bin/env python3 -- coding: utf-8 -- """Detects GitLab public signup.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GitLab public signup Detection', 'description': 'Detects GitLab...

GitList Disclosure Detection

GitList is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """GitList is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GitList Disclosure Detection', 'description': 'GitList is exposed.', 'author':...

Git Credentials - Detect

Git credentials were detected. !/usr/bin/env python3 -- coding: utf-8 -- """Git credentials were detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Git Credentials - Detect', 'description': 'Git credentials we...

Gnuboard CMS - Cross-Site Scripting Detection

Gnuboard CMS contains a cross-site scripting vulnerability which allows remote attackers to inject arbitrary JavaScript into the responses returned by the server. !/usr/bin/env python3 -- coding: utf-8 -- """Gnuboard CMS contains a cross-site scripting vulnerability which allows remote attackers ...

GoIP-1 GSM - Local File Inclusion Detection

GoIP-1 GSM is vulnerable to local file inclusion because input passed thru the 'content' or 'sidebar' GET parameter in 'frame.html' or 'frame.A100.html' is not properly sanitized before being used to read files. This can be exploited by an unauthenticated attacker to read arbitrary files on the...

Google Service Json Detection

google-services.json internal file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """google-services.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Google Service Json Detection', 'description':...

Google Bucket detection

Detects Google Bucket detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Google Bucket detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Google Bucket detection', 'description': 'Detects Google...

Grandstream GRP Panel - Detect

Detected the presence of a Grandstream GRP web management login panel. The React-based SPA loads characteristic JavaScript modules including tl.account.ucm.js and webpack chunks for UCM modules. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the presence of a Grandstream GRP web management...

Graphql Ruby Detect

Detects Graphql Ruby Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Graphql Ruby Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Graphql Ruby Detect', 'description': 'Detects Graphql Ruby...

Detect Graylog REST API

Detects Detect Graylog REST API. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Detect Graylog REST API.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect Graylog REST API', 'description': 'Detects Detect...

Groupoffice 3.4.21 - Local File Inclusion Detection

Groupoffice 3.4.21 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Groupoffice 3.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Groupoffice 3.4.21 - Local File Inclusio...

GROWI Installer - Exposure Detection

Checks for the presence of a GROWI Installer. !/usr/bin/env python3 -- coding: utf-8 -- """Checks for the presence of a GROWI Installer.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GROWI Installer - Exposure...

Hangfire Dashboard Panel - Detect

Hangfire Dashboard panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Hangfire Dashboard panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Hangfire Dashboard Panel - Detect',...

hanwang-detect

Detects hanwang-detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects hanwang-detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'hanwang-detect', 'description': 'Detects hanwang-detect.', 'author':...

HashiCorp Boundary Detect

Detects HashiCorp Boundary !/usr/bin/env python3 -- coding: utf-8 -- """Detects HashiCorp Boundary.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HashiCorp Boundary Detect', 'description': 'Detects HashiCorp...

Hashicorp Consul Agent - Detect

Hashicorp Consul Agent was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Hashicorp Consul Agent was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Hashicorp Consul Agent - Detect', 'description':...

Hikvision Configuration File - Detect

Hikvision configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Hikvision configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Hikvision Configuration File - Detect...

Hongfan OA udfmr.asmx - SQL injection Detection

There is a SQL injection vulnerability in Hongfan iOffice 10 Hospital Edition, which can be exploited by attackers to obtain sensitive database information. !/usr/bin/env python3 -- coding: utf-8 -- """There is a SQL injection vulnerability in Hongfan iOffice 10 Hospital Edition, which can be...

HP Media Vault Detect

Detects HP Media Vault Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects HP Media Vault Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HP Media Vault Detect', 'description': 'Detects HP Media Vaul...

HugeGraph - Detect

A huge graph technology was detected. !/usr/bin/env python3 -- coding: utf-8 -- """A huge graph technology was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HugeGraph - Detect', 'description': 'A huge gra...

IBM iNotes Login Panel - Detect

IBM iNotes login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """IBM iNotes login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'IBM iNotes Login Panel - Detect', 'description':...

IBM WebSphere Application - Source File Exposure Detection

Disclose application specific files contained within the war file, including files under the web-inf and meta-inf directories. !/usr/bin/env python3 -- coding: utf-8 -- """Disclose application specific files contained within the war file, including files under the web-inf and meta-.""" from...

Icecast Streaming Media Server Information Panel - Detect

Icecast Streaming Media Server information panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Icecast Streaming Media Server information panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name'...

Icinga Web 2 Installer Exposure Detection

Icinga Web 2 installer/setup wizard is publicly accessible. The setup page at /icingaweb2/setup exposes the configuration wizard which guides through full application configuration including database credentials, authentication backends, and admin account creation. While a setup token is required...

ICTBroadcast Installation Wizard Detection

ICTBroadcast is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """ICTBroadcast is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclien...

IMO - Arbitrary File Download Detection

The imo cloud office can read system sensitive files because the filename parameter of the /file/Placard/upload/ImoDownLoadUI.php page is not strictly filtered. !/usr/bin/env python3 -- coding: utf-8 -- """The imo cloud office can read system sensitive files because the filename parameter of the...

ipTIME Router Login Panel - Detect

ipTIME router login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ipTIME router login panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ipTIME Router Login Panel -...

Ivanti Xtraction - Detect

Detects Ivanti Xtraction, a reporting and dashboard platform used with Ivanti products. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Ivanti Xtraction, a reporting and dashboard platform used with Ivanti products.""" from kittysploit import from lib.protocols.http.httpclient import...

Jamf Pro Login Panel - Detect

Jamf Pro login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Jamf Pro login panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Jamf Pro Login Panel - Detect',...

JBoss SOA Platform Login Panel - Detect

JBoss SOA Platform login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """JBoss SOA Platform login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'JBoss SOA Platform Login Panel -...

Detect Jenkins in Debug Mode with Stack Traces Enabled

Module identified that the affected host is running an instance of Jenkins in debug mode, as a result stack traces are enabled. !/usr/bin/env python3 -- coding: utf-8 -- """Module identified that the affected host is running an instance of Jenkins in debug mode, as a result stack tr.""" from...

Exposed FileZilla Configuration File - Exposure Detection

Detected publicly accessible FileZilla client configuration files sitemanager.xml, recentservers.xml, filezilla.xml. !/usr/bin/env python3 -- coding: utf-8 -- """Detected publicly accessible FileZilla client configuration files sitemanager.""" from kittysploit import from...

MCP SSE API Exposed - Detect

Detects exposed Model Context Protocol MCP servers through the SSE API. MCP servers often provide administrative access to AI tools, LLM systems, or other automation infrastructure. Exposed MCP interfaces can lead to unauthorized access, information disclosure, and potential system compromise. Th...

Authentication.asmx - Detect

Authentication Web Service authentication.asmx file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Authentication Web Service authentication.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Visual Studio Code Directories - Detect

Visual Studio Code directories were detected. !/usr/bin/env python3 -- coding: utf-8 -- """Visual Studio Code directories were detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Visual Studio Code Directories ...

Webalizer Panel - Detect

Webalizer panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Webalizer panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Webalizer Panel - Detect', 'description': 'Webalizer panel was...

ExpressionEngine Exception - Page Detection

Detects ExpressionEngine Exception - Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects ExpressionEngine Exception - Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ExpressionEngine Exception - Page...

EyesOfNetwork Detect

EyesOfNetwork detection !/usr/bin/env python3 -- coding: utf-8 -- """EyesOfNetwork detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'EyesOfNetwork Detect', 'description': 'EyesOfNetwork detection', 'author':...