Node.js REPL History Disclosure Detection

The Node.js REPL history file .nodereplhistory was exposed, which had contained a log of commands entered into the Node.js interactive shell. !/usr/bin/env python3 -- coding: utf-8 -- """The Node.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Nomad - Exposed Jobs Detection

Nomad jobs were discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Nomad jobs were discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Nomad - Exposed Jobs Detection', 'description': 'Nomad jobs were...

Notion Detect

Detects Notion Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Notion Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Notion Detect', 'description': 'Detects Notion Detect.', 'author': 'KittySplo...

nPerf Server - Detect

A nperf panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """A nperf panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'nPerf Server - Detect', 'description': 'A nperf panel was detected....

NPM .npmignore File Disclosure Detection

Detected NPM .npmignore configuration file, potentially exposing excluded files and project structure information. !/usr/bin/env python3 -- coding: utf-8 -- """Detected NPM .""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

NPM Anonymous CLI Metrics Json Detection

anonymous-cli-metrics.json internal file in NPM is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """anonymous-cli-metrics.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'NPM Anonymous CLI Metrics Json Detection...

NTFY Web - Exposure Detection

Publicly exposed NTFY web interface allowing unauthorized publish or subscribe access. !/usr/bin/env python3 -- coding: utf-8 -- """Publicly exposed NTFY web interface allowing unauthorized publish or subscribe access.""" from kittysploit import from lib.protocols.http.httpclient import Httpclien...

Flow Configuration - Exposure Detection

Detects an exposed Flow configuration file. These files may contain sensitive information such as credentials, internal endpoints, or environment settings. !/usr/bin/env python3 -- coding: utf-8 -- """Detects an exposed Flow configuration file.""" from kittysploit import from...

Fortinet FortiAnalyzer - Login Panel Detection

Fortinet FortiAnalyzer is a centralised log management and analytics platform for Fortinet security devices. The web management console is commonly internet-exposed on ports 443, 10443, 9443, or 4443. !/usr/bin/env python3 -- coding: utf-8 -- """Fortinet FortiAnalyzer is a centralised log...

Fortinet FortiOS Management Interface Panel - Detect

Fortinet FortiOS Management interface panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Fortinet FortiOS Management interface panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Fortine...

Fortinet FortiSandbox Panel - Detect

Fortinet FortiSandbox login panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Fortinet FortiSandbox login panel was discovered.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Fortinet...

FOSSBilling - Installation Detection

FOSSBilling installation dashboard has been detected. !/usr/bin/env python3 -- coding: utf-8 -- """FOSSBilling installation dashboard has been detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'FOSSBilling -...

FreeScout Panel - Detect

FreeScout panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """FreeScout panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'FreeScout Panel - Detect', 'description': 'FreeScout panel...

FusionAuth Admin Panel - Detect

Detects FusionAuth Admin Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects FusionAuth Admin Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'FusionAuth Admin Panel - Detect',...

GeoWebServer Detector Panel - Detect

GeoWebServer Detector panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """GeoWebServer Detector panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GeoWebServer Detector Panel - Detect',...

Uninitialized GitLab instances Detection

Prior to version 14, GitLab installations required a root password to be set via the web UI. If the administrator skipped this step, any visitor could set a password and control the instance. !/usr/bin/env python3 -- coding: utf-8 -- """Prior to version 14, GitLab installations required a root...

Go.Control Event Administration Panel - Detect

Detects the presence of the Go.Control Event Administration login panel. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of the Go.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Go.Control Event...

Gocron Panel - Detect

Gocron panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Gocron panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Gocron Panel - Detect', 'description': 'Gocron panel was...

Go.mod Disclosure Detection

go.mod internal file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """go.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Go.mod Disclosure Detection', 'description': 'go.mod internal file is exposed.',...

Grails Admin Console Panel - Detect

Grails Admin Console panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Grails Admin Console panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Grails Admin Console Panel - Detect',...

Graphql apiforwp Detect

Detects Graphql apiforwp Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Graphql apiforwp Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Graphql apiforwp Detect', 'description': 'Detects Graphql...

Graphql Gqlgen Detect

Detects Graphql Gqlgen Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Graphql Gqlgen Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Graphql Gqlgen Detect', 'description': 'Detects Graphql Gqlge...

Growatt Shinelink - Login Panel Detection

Growatt Shinelink is a web-based data logger and monitoring interface for Growatt solar inverters, providing real-time solar energy production data and system configuration. !/usr/bin/env python3 -- coding: utf-8 -- """Growatt Shinelink is a web-based data logger and monitoring interface for...

Guardfile Config - Detect

Guardfile configuration information was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Guardfile configuration information was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Guardfile Config -...

H2O Dashboard - Exposure Detection

H2o dashboard by default has no authentication and can lead to RCE on the host. !/usr/bin/env python3 -- coding: utf-8 -- """H2o dashboard by default has no authentication and can lead to RCE on the host.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Haivision Gateway Login Panel - Detect

Haivision Gateway login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Haivision Gateway login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Haivision Gateway Login Panel -...

Detect Haproxy Exporter

Haproxy metrics is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Haproxy metrics is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect Haproxy Exporter', 'description': 'Haproxy metrics is...

Headlamp Kubernetes UI Panel - Detect

Detected Headlamp Kubernetes Web UI panel exposed, which could lead to unauthorized access to Kubernetes cluster management if not properly secured. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Headlamp Kubernetes Web UI panel exposed, which could lead to unauthorized access to Kubernete...

Hitron Technologies Router Login Panel - Detect

Hitron Technologies router login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Hitron Technologies router login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Hitron Technologi...

Homer Panel - Detect

A simple static homepage was discovered !/usr/bin/env python3 -- coding: utf-8 -- """A simple static homepage was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Homer Panel - Detect', 'description': 'A...

Honeywell Scada Configuration File - Detect

Honeywell Scada configuration file was detected. The downloaded file opens with the file name and contains critical information about the destination address. !/usr/bin/env python3 -- coding: utf-8 -- """Honeywell Scada configuration file was detected.""" from kittysploit import from...

HOOBS Panel - Detect

HOOBS is a home automation platform that bridges HomeKit and non-HomeKit devices. !/usr/bin/env python3 -- coding: utf-8 -- """HOOBS is a home automation platform that bridges HomeKit and non-HomeKit devices.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Hewlett Packard Enterprise System Management Login Panel - Detect

Hewlett Packard Enterprise System Management login page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Hewlett Packard Enterprise System Management login page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

HP iLO Serial Key - Detect

HP iLO serial key was detected. !/usr/bin/env python3 -- coding: utf-8 -- """HP iLO serial key was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HP iLO Serial Key - Detect', 'description': 'HP iLO serial...

HP LaserJet Professional Panel - Detect

HP LaserJet Professional panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """HP LaserJet Professional panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HP LaserJet Professional Panel -...

IBM API Connect Developer Portal - Detect

IBM API Connect Developer Portal was detected. !/usr/bin/env python3 -- coding: utf-8 -- """IBM API Connect Developer Portal was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.osint.faviconhash import shodanmmh3 class ModuleScanner, Httpclient:...

Icecast Config - File Disclosure Detection

Icecast Config file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Icecast Config file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Icecast Config - File Disclosure Detection', 'description':...

ILIAS Login Panel - Detect

ILIAS login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ILIAS login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ILIAS Login Panel - Detect', 'description': 'ILIAS login...

Indegy Sensor Setup - Installer Detection

Indegy Sensor is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Indegy Sensor is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import...

Inertia.js - Detect

Detected Inertia.js passively using a single plain GET request with no special headers. It matched four server-emitted Inertia-specific signals on the initial document: three proximity-bound body patterns covering the embedded page object formats and one Vary: X-Inertia response header signal set...

Intercom widget detection

Detects Intercom widget detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Intercom widget detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Intercom widget detection', 'description': 'Detects...

IoTaWatt Configuration App Exposure Detection

An IoTaWatt configuration app was discovered. Unauthenticated access to an IoTaWatt energy monitor could give a malicious attacker the means to upload to any of several third-party energy websites/database. !/usr/bin/env python3 -- coding: utf-8 -- """An IoTaWatt configuration app was...

ITFlow Unfinished Installation Detection

Detected ITFlow setup wizard was exposed with an unfinished installation, allowing attackers to configure the database and create an admin account. !/usr/bin/env python3 -- coding: utf-8 -- """Detected ITFlow setup wizard was exposed with an unfinished installation, allowing attackers to configur...

Jan AI - Detect

Detects the Jan AI local server, an open-source ChatGPT alternative that runs models locally and exposes a Cortex-powered, OpenAI-compatible API default port 1337. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the Jan AI local server, an open-source ChatGPT alternative that runs models...

JavaMelody Monitoring Exposed Detection

JavaMelody is a tool used to monitor Java or Java EE applications in QA and production environments. JavaMelody was detected on this web application. One option in the dashboard is to "View http sessions". This can be used by an attacker to steal a user's session. !/usr/bin/env python3 -- coding:...

Jellyfin Public Users - Exposure Detection

The Jellyfin media server exposed user information via the public users API endpoint. This endpoint could have leaked sensitive data including usernames, user IDs, server IDs, administrator status, password configuration, login activity, and user policies without authentication. !/usr/bin/env...

Jenkins panel async-people Detection

Detects Jenkins panel async-people. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Jenkins panel async-people.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Jenkins panel async-people Detection', 'description...

Pinata API Key - Expose Detection

Detects Pinata API Key - Expose. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Pinata API Key - Expose.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pinata API Key - Expose Detection', 'description': 'Detec...

PowerBI Report Server - Detect

PowerBI Report Server was detected. !/usr/bin/env python3 -- coding: utf-8 -- """PowerBI Report Server was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PowerBI Report Server - Detect', 'description':...

PowerJob Login Panel - Detect

PowerJob login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """PowerJob login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PowerJob Login Panel - Detect', 'description':...