Firebase Cloud Messaging - Server Key Disclosure Detection

Detected Firebase Cloud Messaging FCM legacy server keys were identified in client-side files. These keys can be used to send push notifications to any device. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Firebase Cloud Messaging FCM legacy server keys were identified in client-side...

Flask Debug Toolbar - Exposure Detection

Detected Flask Debug Toolbar was exposed in production, potentially leaking sensitive application information, SQL queries, request data, and configuration details. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Flask Debug Toolbar was exposed in production, potentially leaking sensitive...

Flower - Detect

Detected that Flower was a real-time monitor and web admin for the Celery distributed task queue. !/usr/bin/env python3 -- coding: utf-8 -- """Detected that Flower was a real-time monitor and web admin for the Celery distributed task queue.""" from kittysploit import from...

FusionAuth Exposed Admin Setup Detection

FusionAuth Admin Setup is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """FusionAuth Admin Setup is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'FusionAuth Exposed Admin Setup Detection',...

Generic Tokens Detection

Detects likely exposed API tokens or secrets in HTTP responses. !/usr/bin/env python3 -- coding: utf-8 -- """Detect likely exposed API tokens / secrets in HTML responses.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: inf...

GeoServer Login Panel - Detect

GeoServer login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """GeoServer login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GeoServer Login Panel - Detect', 'description':...

Gira HomeServer 4 Login Panel - Detect

Gira HomeServer 4 login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Gira HomeServer 4 login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Gira HomeServer 4 Login Panel -...

Github Enterprise Login Panel - Detect

Github Enterprise login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Github Enterprise login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Github Enterprise Login Panel -...

Gnuboard 5 - Cross-Site Scripting Detection

Gnuboard 5 contains a cross-site scripting vulnerability via the cleanxsstags function called in new.php. !/usr/bin/env python3 -- coding: utf-8 -- """Gnuboard 5 contains a cross-site scripting vulnerability via the cleanxsstags function called in new.""" from kittysploit import from...

Gnuboard CMS - Detect

Gnuboard CMS was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Gnuboard CMS was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Gnuboard CMS - Detect', 'description': 'Gnuboard CMS was detected.',...

Gogs Login Panel - Detect

Gogs login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Gogs login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Gogs Login Panel - Detect', 'description': 'Gogs login panel...

Gogs (Go Git Service) - Installer Detection

Go Git Service installer panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Go Git Service installer panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Gogs Go Git Service - Installer...

Go pprof Debug Page Detection

go pprof debug page was exposed. !/usr/bin/env python3 -- coding: utf-8 -- """go pprof debug page was exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Go pprof Debug Page Detection', 'description': 'go pprof...

Grafana Unauthenticated Access Detection

Detects Grafana instances configured with anonymous access enabled, allowing unauthenticated users to access dashboards, data sources, organization info, and potentially sensitive monitoring data without any credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Grafana instances...

Graphql PHP Detect

Detects Graphql PHP Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Graphql PHP Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Graphql PHP Detect', 'description': 'Detects Graphql PHP Detect.',...

GUDE - Default Login Detection

GUDE 2301 and 2302 default administrator login credentials admin:admin were detected. !/usr/bin/env python3 -- coding: utf-8 -- """GUDE 2301 and 2302 default administrator login credentials admin:admin were detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

H2O Wave ML Application Server - Detect

H2O Wave was detected. H2O Wave was an open-source Python development framework for building real-time interactive AI and ML web applications. The Wave server hosted applications built on the platform. !/usr/bin/env python3 -- coding: utf-8 -- """H2O Wave was detected.""" from kittysploit import...

Helm Dashboard - Exposure Detection

Detects Helm Dashboard - Exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Helm Dashboard - Exposure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Helm Dashboard - Exposure Detection', 'description':...

HIKVISION iSecure Center - Remote Code Execution Detection

Hikvision's comprehensive security management platform has a Fastjson remote command execution vulnerability, which can execute system commands and obtain system permissions and sensitive data information of the target server. !/usr/bin/env python3 -- coding: utf-8 -- """Hikvision's comprehensive...

Hybris Management Console Login Panel - Detect

Hybris Management Console login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Hybris Management Console login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Hybris Management...

Honeywell Building Control Detection

Honeywell Building control panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Honeywell Building control panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Honeywell Building Control...

Hookbot Rat Panel - Detect

Hookbot panel were detected. !/usr/bin/env python3 -- coding: utf-8 -- """Hookbot panel were detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Hookbot Rat Panel - Detect', 'description': 'Hookbot panel were...

HPE OneView - Panel Detect

HPE OneView is an infrastructure management platform that provides automated management, monitoring, and updates for HPE servers, storage, and networking resources through a unified interface. !/usr/bin/env python3 -- coding: utf-8 -- """HPE OneView is an infrastructure management platform that...

HPE System Management Anonymous Access Detection

HPE system management anonymous access is enabled. !/usr/bin/env python3 -- coding: utf-8 -- """HPE system management anonymous access is enabled.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HPE System Management...

Hrsale 2.0.0 - Local File Inclusion Detection

Hrsale 2.0.0 is vulnerable to local file inclusion. This exploit allow you to download any readable file from server without permission and login session !/usr/bin/env python3 -- coding: utf-8 -- """Hrsale 2.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclien...

HTTPBin - Cross-Site Scripting Detection

HTTPBin contains a cross-site scripting vulnerability which can allow an attacker to execute arbitrary script. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks. !/usr/bin/env python3 -- coding: utf-8 -- """HTTPBin contains a cross-site scriptin...

Apache httpd Config File - Detect

Apache httpd configuration information was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Apache httpd configuration information was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache httpd Conf...

Hubble - Detect

Hubble products was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Hubble products was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Hubble - Detect', 'description': 'Hubble products was detected....

HugeGraph Studio - Detect

HugeGraph Studio was detected. !/usr/bin/env python3 -- coding: utf-8 -- """HugeGraph Studio was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HugeGraph Studio - Detect', 'description': 'HugeGraph Studio...

Huiwen library bibliographic Retrieval System - Information Exposure Detection

Huiwen library bibliographic retrieval system /include/config.properties file contains sensitive information, attackers can directly access to obtain information !/usr/bin/env python3 -- coding: utf-8 -- """Huiwen library bibliographic retrieval system /include/config.""" from kittysploit import...

HYPERPLANNING Login Panel - Detect

HYPERPLANNING products was detected. !/usr/bin/env python3 -- coding: utf-8 -- """HYPERPLANNING products was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HYPERPLANNING Login Panel - Detect', 'description...

IBM Websphere Friendly Path Exposure Detection

Finds friendly path exposed that can be used to access signup page and create new user accounts. !/usr/bin/env python3 -- coding: utf-8 -- """Finds friendly path exposed that can be used to access signup page and create new user accounts.""" import re from kittysploit import from...

Default IBM HTTP Server Detection

Detects Default IBM HTTP Server. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Default IBM HTTP Server.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Default IBM HTTP Server Detection', 'description': 'Detec...

IBM webMethods Integration Login Panel - Detect

Identified an exposed IBM or Software AG webMethods login panel !/usr/bin/env python3 -- coding: utf-8 -- """Identified an exposed IBM or Software AG webMethods login panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Icecast Streaming Media Server Detection

Detects Icecast Streaming Media Server Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Icecast Streaming Media Server Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Icecast Streaming Media...

Interact Software Panel - Detect

Interact Software was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Interact Software was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Interact Software Panel - Detect', 'description': 'Interact...

Iomega LenovoEMC NAS Login Panel - Detect

Iomega LenovoEMC NAS login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Iomega LenovoEMC NAS login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Iomega LenovoEMC NAS Login...

iSpyConnect - Detect

Detects iSpyConnect - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects iSpyConnect - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'iSpyConnect - Detect', 'description': 'Detects iSpyConnect -...

Ivanti Endpoint Manager (EPM) - Detect

An Ivanti Endpoint Manager was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An Ivanti Endpoint Manager was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.osint.faviconhash import shodanmmh3 class ModuleScanner, Httpclient: info = 'name...

Ivanti Sentry Panel - Detect

Ivanti Sentry panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ivanti Sentry panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ivanti Sentry Panel - Detect', 'description': 'Ivanti...

Jackett UI - Unauthenticated Detection

The Jackett UI can be accessed without authentication, potentially exposing sensitive information and configuration settings to unauthorized users. !/usr/bin/env python3 -- coding: utf-8 -- """The Jackett UI can be accessed without authentication, potentially exposing sensitive information and...

Jira Unauthenticated Projects Detection

Detects Jira Unauthenticated Projects. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Jira Unauthenticated Projects.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Jira Unauthenticated Projects Detection',...

Joomla! Component Easy Shop 1.2.3 - Local File Inclusion Detection

The Joomla! component Easy Shop version 1.2.3 is vulnerable to Local File Inclusion LFI attacks. !/usr/bin/env python3 -- coding: utf-8 -- """The Joomla! component Easy Shop version 1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

Joomla MarvikShop ShoppingCart 3.4 - Cross-Site Scripting Detection

Joomla MarvikShop ShoppingCart 3.4 is vulnerable to reflected xss where attacker can send to victim a link containing a malicious URL in an email or instant message can perform a wide variety of actions, such as stealing the victim's session token or login credentials. !/usr/bin/env python3 --...

Jspxcms Detect

Detects Jspxcms Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Jspxcms Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Jspxcms Detect', 'description': 'Detects Jspxcms Detect.', 'author':...

Karma Configuration File - Detect

Karma configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Karma configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Karma Configuration File - Detect',...

Kubernetes Kustomize Configuration - Detect

Kubernetes Kustomize configuration was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Kubernetes Kustomize configuration was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kubernetes Kustomize...

Kyan Credential - Exposure Detection

Kyan Network login panel was detected. Password and other credential theft is possible via accessing this panel. !/usr/bin/env python3 -- coding: utf-8 -- """Kyan Network login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Landray EIS - SQL Injection Detection

Landray's smart collaboration platform EIS has a very rich collection of modules to meet the needs of organizations and enterprises in knowledge, collaboration, and project management system construction. There is a SQL injection vulnerability in the rptlistreportdefinefield.aspx interface of...

Laravel Sessions Folder Exposure Detection

Detected unauthenticated access to the Laravel session storage directory, allowing attackers to browse and download session files that may contain active authentication tokens, CSRF tokens, and serialized user data. !/usr/bin/env python3 -- coding: utf-8 -- """Detected unauthenticated access to t...