Apache Impala - Exposure Detection

Apache Impala is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Impala is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Impala - Exposure Detection', 'description': 'Apache Impala is...

Apache JSPWiki - User IP Enumeration Detection

Enumerates the IP Address and users that is currently accessing an Apache JSPWiki web application, leading open source WikiWiki engine, feature-rich and built around standard JEE components Java, servlets, JSP. !/usr/bin/env python3 -- coding: utf-8 -- """Enumerates the IP Address and users that ...

Apache Ozone - Exposure Detection

Detects if path /conf of Apache Ozone web application is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Detects if path /conf of Apache Ozone web application is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Apache Polaris - Information Disclosure Detection

Detects a Apache Polaris server, the interoperable, open source catalog for Apache Iceberg. !/usr/bin/env python3 -- coding: utf-8 -- """Detects a Apache Polaris server, the interoperable, open source catalog for Apache Iceberg.""" from kittysploit import from lib.protocols.http.httpclient import...

Apache SkyWalking - Dashboard Detection

Apache SkyWalking server, an APM, Application Performance Monitoring System, exposed the backend monitoring dashboard. An attacker can execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """Apache SkyWalking server, an APM, Application Performance Monitoring System, exposed...

Apache Sling - Detect

Detects a Apache Sling, a Java-based web framework designed for content-centric applications, using a RESTful approach to map URL requests directly to resources in a Java Content Repository JCR. !/usr/bin/env python3 -- coding: utf-8 -- """Detects a Apache Sling, a Java-based web framework design...

Apache Tapestry Framework detect

Detects Apache Tapestry Framework detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Apache Tapestry Framework detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Tapestry Framework detect',...

Tomcat Exposed - Detect

An Apache Tomcat instance was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An Apache Tomcat instance was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tomcat Exposed - Detect', 'description': 'A...

APC UPS Login - Detect

APC UPS panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """APC UPS panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'APC UPS Login - Detect', 'description': 'APC UPS panel was...

ApostropheCMS - Detect

Detected the presence of ApostropheCMS, a full-stack content management system built on Node.js and MongoDB. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the presence of ApostropheCMS, a full-stack content management system built on Node.""" import re from kittysploit import from...

AppDynamics (Cisco) RUM - Detect

Detects AppDynamics Cisco End User Monitoring EUM artifacts. !/usr/bin/env python3 -- coding: utf-8 -- """Detects AppDynamics Cisco End User Monitoring EUM artifacts.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Aptus Login - Panel Detect

Aptus login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Aptus login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Aptus Login - Panel Detect', 'description': 'Aptus login...

Arcade.php - SQL Injection Detection

The arcade.php script is vulnerable to SQL injection. By exploiting this vulnerability, an attacker can manipulate the SQL queries executed by the script, potentially gaining unauthorized access to the database. !/usr/bin/env python3 -- coding: utf-8 -- """The arcade.""" from kittysploit import...

ArcGIS REST Services Directory - Detect

Check for the existence of the "/arcgis/rest/services" path on an ArcGIS server. !/usr/bin/env python3 -- coding: utf-8 -- """Check for the existence of the "/arcgis/rest/services" path on an ArcGIS server.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

AspNetMvc Version - Detect

Detects version disclosed via 'X-AspNetMvc-Version' header. !/usr/bin/env python3 -- coding: utf-8 -- """Detects version disclosed via 'X-AspNetMvc-Version' header.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

AspNet Version Disclosure - Detect

Detects version disclosed via 'X-AspNet-Version' header. !/usr/bin/env python3 -- coding: utf-8 -- """Detects version disclosed via 'X-AspNet-Version' header.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

AstrBot WebUI Login Panel - Detect

Astrbot WebUI login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Astrbot WebUI login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AstrBot WebUI Login Panel - Detect',...

AsyncAPI Spec Inventory Detection

Detected publicly accessible AsyncAPI specification files YAML/JSON, which might have exposed message channels, server endpoints, and security schemes. !/usr/bin/env python3 -- coding: utf-8 -- """Detected publicly accessible AsyncAPI specification files YAML/JSON, which might have exposed messag...

AVTECH Video Surveillance Product - Authentication Bypass Detection

AVTECH Video Surveillance Products password disclosure through /cgi-bin/user/Config.cgi. !/usr/bin/env python3 -- coding: utf-8 -- """AVTECH Video Surveillance Products password disclosure through /cgi-bin/user/Config.""" from kittysploit import from lib.protocols.http.httpclient import Httpclien...

AWStats Listing Detection

Searches for exposed awstats Internal Information. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for exposed awstats Internal Information.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AWStats Listing...

AWS Cloudfront service detection

Detect websites using AWS cloudfront service !/usr/bin/env python3 -- coding: utf-8 -- """Detect websites using AWS cloudfront service.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AWS Cloudfront service detection...

AWS Configuration - Detect

AWS config found via /.aws/config. !/usr/bin/env python3 -- coding: utf-8 -- """AWS config found via /.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AWS Configuration - Detect', 'description': 'AWS confi...

AWS bucket with Object listing Detection

Object listing is enabled in AWS bucket. !/usr/bin/env python3 -- coding: utf-8 -- """Object listing is enabled in AWS bucket.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AWS bucket with Object listing Detection'...

DigitalOcean Key Exposure via Axiom Detection

Axiom is a dynamic infrastructure framework to efficiently work with multi-cloud environments. !/usr/bin/env python3 -- coding: utf-8 -- """Axiom is a dynamic infrastructure framework to efficiently work with multi-cloud environments.""" from kittysploit import from lib.protocols.http.httpclient...

Axway API Manager Panel - Detect

Axway API Manager panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Axway API Manager panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Axway API Manager Panel - Detect', 'description...

Axway SecureTransport Web Client Panel - Detect

AXWAY Secure Transport Web Client panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """AXWAY Secure Transport Web Client panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Axway...

Badarg Log File Exposure Detection

Badarg log file was exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Badarg log file was exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Badarg Log File Exposure Detection', 'description': 'Badarg log...

Bazarr Login - Detect

Bazarr login page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Bazarr login page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Bazarr Login - Detect', 'description': 'Bazarr login page w...

BeyondTrust Login Panel - Detect

BeyondTrust login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """BeyondTrust login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'BeyondTrust Login Panel - Detect', 'description...

Atlassian Bitbucket Public Repository Exposure Detection

Bitbucket Public Repository is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Bitbucket Public Repository is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Atlassian Bitbucket Public Repository...

Bitrix Site Manager - Log File Disclosure Detection

Detected Bitrix Site Manager log files, potentially exposing sensitive information including database credentials, file paths, SQL queries, and user session data. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Bitrix Site Manager log files, potentially exposing sensitive information...

BRAVIA Signage - Exposure Detection

Bravia Signage is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Bravia Signage is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'BRAVIA Signage - Exposure Detection', 'description': 'Bravia Signage ...

CAREL Pl@ntVisor Panel Detection

Carel plantvisor panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Carel plantvisor panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'CAREL Pl@ntVisor Panel Detection', 'description':...

Casdoor Login Panel - Detect

Casdoor login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Casdoor login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Casdoor Login Panel - Detect', 'description': 'Casdoor...

Test CGI Script - Detect

Test CGI script was detected. Response page returned by this CGI script exposes a list of server environment variables. !/usr/bin/env python3 -- coding: utf-8 -- """Test CGI script was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Changedetection.io Panel Detection

Detects Changedetection.io website change monitoring panels. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Changedetection.io panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "Changedetection.io Panel...

Checkmk Login Panel - Detect

Checkmk login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Checkmk login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Checkmk Login Panel - Detect', 'description': 'Checkmk...

Chemotargets Clarity Vista Login Panel - Detect

Chemotargets Clarity Vista login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Chemotargets Clarity Vista login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Chemotargets...

Cisco Prime License Manager - Detect

Detected exposed Cisco Prime License Manager portals !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed Cisco Prime License Manager portals.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cisco Prime...

Cisco Unified Communications Self-Service User Portal - Detection

Detected the presence of the Cisco Unified Communications User Management Panel. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the presence of the Cisco Unified Communications User Management Panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

ClearML Panel - Detect

ClearML was detected. ClearML is an open-source MLOps platform for experiment tracking, model management, and pipeline orchestration. Exposed instances may allow access to ML experiments, models, and infrastructure configurations. !/usr/bin/env python3 -- coding: utf-8 -- """ClearML was...

Cleo Technology - Detect

This template detects Cleo technologies, including VLTrader, Harmony, and LexiCom, by inspecting response headers.It also extracts version information for each identified technology. !/usr/bin/env python3 -- coding: utf-8 -- """This template detects Cleo technologies, including VLTrader, Harmony,...

Silverlight cross-domain policy Detection

Detects Silverlight cross-domain policy. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Silverlight cross-domain policy.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Silverlight cross-domain policy Detection...

Adobe ColdFusion - Cross-Site Scripting Detection

Adobe ColdFusion debug page contains a cross-site scripting vulnerability when the application is running on a remote host. An attacker can execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...

Compal CH7465LG Login Panel - Detect

Compal CH7465LG login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Compal CH7465LG login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Compal CH7465LG Login Panel - Detect',...

Confluence Installation Page - Exposure Detection

Confluence is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Confluence is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Drupal 7 Elfinder - Unauthenticated Connector Exposure Detection

Identifies Drupal sites with the elfinder library installed, which could be vulnerable to unrestricted file upload through the connector.php file.When this component is detected, the site may be vulnerable to remote code execution attacks via PHP file uploads.This template only detects the presen...

Kong Manager OSS/Admin - Exposure Detection

Exposed Kong Manager OSS/Admin interface accessible without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Exposed Kong Manager OSS/Admin interface accessible without authentication.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Apache JMeter Dashboard Login Panel - Detect

Detects the Apache JMeter Dashboard web UI distinct title and assets. !/usr/bin/env python3 -- coding: utf-8 -- """Apache JMeter Dashboard login panel detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "Apache...

CPPPO Ethernet/IP CIP Honeypot Default Configuration - Detect

Detected devices responding with the default configuration signature of the CPPPO Python-based Ethernet/IP CIP parser honeypot.This indicates systems likely running the default Conpot honeypot configuration for ICS using the Common Industrial Protocol CIP over Ethernet/IP. !/usr/bin/env python3 -...