SkyCaiji - Exposed Installation Detection

SkyCaiji was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """SkyCaiji was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SkyCaiji - Exposed Installation Detection', 'description': 'SkyCaiji was...

Senayan Library Management System v9.5.2 (Bulian) - Cross-Site Scripting Detection

SLiMS 9.5.2 Bulian vulnerable to Cross-Site Scripting in index.php. When injected, website will execute the payload repeatedly !/usr/bin/env python3 -- coding: utf-8 -- """SLiMS 9.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: inf...

Webbdesign SL-Studio - Local File Inclusion Detection

Webbdesign SL-Studio is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Webbdesign SL-Studio is vulnerable to local file inclusion.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Snoop Servlet - Information Disclosure Detection

The Snoop Servlet returns information about the HTTP request itself and sometimes. It could help an attacker to prepare more advanced attacks. !/usr/bin/env python3 -- coding: utf-8 -- """The Snoop Servlet returns information about the HTTP request itself and sometimes.""" from kittysploit import...

SonicWall Network Security Login - Detect

SonicWall Network Security Login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SonicWall Network Security Login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SonicWall Network...

Sophos Web Appliance Detection

Detects Sophos Web Appliance. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Sophos Web Appliance.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sophos Web Appliance Detection', 'description': 'Detects Sophos...

Spring Boot Actuators (Jolokia) XXE Detection

A vulnerability in Spring Boot Actuators's 'jolokia' endpoint allows remote attackers to perform an XML External Entities XXE attack and include content stored on a remote server as if it was its own. This has the potential to allow the execution of arbitrary code and/or disclosure of sensitive...

Detect Springboot Dump Actuator

Performs a thread dump !/usr/bin/env python3 -- coding: utf-8 -- """Performs a thread dump.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect Springboot Dump Actuator', 'description': 'Performs a thread dump',...

Springboot Actuator startup Detection

The startup endpoint provides information about the application’s startup sequence. !/usr/bin/env python3 -- coding: utf-8 -- """The startup endpoint provides information about the application’s startup sequence.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...

SQLite History - Exposure Detection

Detects exposed .sqlitehistory files. These files contain SQLite command history, including executed queries, table names, and potentially sensitive data that was queried or inserted. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed .""" import re from kittysploit import from...

Squid End-of-Life - Detect

Detected Squid proxy versions that have reached End-of-Life EOL and no longer receive security updates. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Squid proxy versions that have reached End-of-Life EOL and no longer receive security updates.""" from kittysploit import from...

Apache Struts Dev Mode - Detect

Multiple Apache Struts applications were detected in dev-mode. !/usr/bin/env python3 -- coding: utf-8 -- """Multiple Apache Struts applications were detected in dev-mode.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name'...

Surreal ToDo 0.6.1.2 - Local File Inclusion Detection

Surreal ToDo 0.6.1.2 is vulnerable to local file inclusion via index.php and the content parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Surreal ToDo 0.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name'...

Switching Protocol Detection

Detects Switching Protocol Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Switching Protocol Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Switching Protocol Detection', 'description':...

Symfony _fragment - Detect

Symfony servers support a "/fragment" command that allows clients to provide custom PHP commands and return the HTML output. !/usr/bin/env python3 -- coding: utf-8 -- """Symfony servers support a "/fragment" command that allows clients to provide custom PHP commands and return t.""" from...

Synology DSM System Info - Detect

Detected the disclosure of Synology DiskStation Manager DSM system information via the SYNO.API.Info endpoint, identifying all available APIs, versions, and installed packages returned without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the disclosure of Synology...

Salesforce Tableau Server - Detect

Detects Salesforce Tableau Server and extracts the buildid. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Salesforce Tableau Server and extracts the buildid.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Tactical RMM Login Panel - Detect

Tactical RMM login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Tactical RMM login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tactical RMM Login Panel - Detect',...

Tekon - Unauthenticated Log Leak Detection

A vulnerability in Tekon allows remote unauthenticated users to disclose the Log of the remote device !/usr/bin/env python3 -- coding: utf-8 -- """A vulnerability in Tekon allows remote unauthenticated users to disclose the Log of the remote device.""" from kittysploit import from...

TheGreenBow VPN - Login Panel Detection

TheGreenBow VPN Client login panel detected. !/usr/bin/env python3 -- coding: utf-8 -- """TheGreenBow VPN Client login panel detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'TheGreenBow VPN - Login Panel...

ThinkPHP 2/3 - Remote Code Execution Detection

ThinkPHP 2.x and 3.0 in Lite mode are susceptible to remote code execution via the s parameter. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. !/usr/bin/env python3 -- coding:...

Thruk Monitoring Webinterface - Cross-Site Scripting Detection

Thruk Monitoring Webinterface contains a cross-site scripting vulnerability via the login parameter at /thruk/cgi-bin/login.cgi. !/usr/bin/env python3 -- coding: utf-8 -- """Thruk Monitoring Webinterface contains a cross-site scripting vulnerability via the login parameter at /thruk/.""" from...

TIBCO Spotfire Statistics Services - Detect

TIBCO Spotfire Statistics Services was detected. !/usr/bin/env python3 -- coding: utf-8 -- """TIBCO Spotfire Statistics Services was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'TIBCO Spotfire Statistics...

Token Json File Disclosure Detection

Internal token.json file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Internal token.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Token Json File Disclosure Detection', 'description': 'Internal...

TPshop - Local File Inclusion Detection

TPshop is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """TPshop is vulnerable to local file inclusion.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'TPshop - Local File Inclusion...

Trend Micro Apex One Login Panel - Detect

Trend Micro Apex One login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Trend Micro Apex One login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Trend Micro Apex One Login...

Glances Unauthenticated Panel Detection

Glance running web server mode & Unauthenticated leads system monitoring to info disclosure !/usr/bin/env python3 -- coding: utf-8 -- """Glance running web server mode & Unauthenticated leads system monitoring to info disclosure.""" from kittysploit import from lib.protocols.http.httpclient impor...

Glowroot Anonymous User Detection

Anonymous user access allows to understand the host internals !/usr/bin/env python3 -- coding: utf-8 -- """Anonymous user access allows to understand the host internals.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Ubiquiti UniFi Security Gateway - Login Panel Detection

Ubiquiti UniFi Security Gateway management panel detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ubiquiti UniFi Security Gateway management panel detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

UPS Network Management Card 4 Path Traversal Detection

UPS Network Management Card version 4 suffers from a path traversal vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """UPS Network Management Card version 4 suffers from a path traversal vulnerability.""" import re from kittysploit import from lib.protocols.http.httpclient import...

vBulletin - Full Path Disclosure Detection

Detects vBulletin - Full Path Disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects vBulletin - Full Path Disclosure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'vBulletin - Full Path Disclosure...

VectorAdmin Panel - Detect

VectorAdmin panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """VectorAdmin panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'VectorAdmin Panel - Detect', 'description': 'VectorAdmi...

SAP Management Console - Panel Detection

Detected the SAP Management Console SAP MC web panel by requesting /sapmc/sapmc.html and checking for a gSOAP server header the page title. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the SAP Management Console SAP MC web panel by requesting /sapmc/sapmc.""" from kittysploit import from...

SECUI WAF Panel - Detect

SECUI WAF panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SECUI WAF panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.osint.faviconhash import shodanmmh3 class ModuleScanner, Httpclient: info = 'name': 'SECUI WAF Panel -...

SecurEnvoy Login Panel - Detect

SecurEnvoy login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SecurEnvoy login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SecurEnvoy Login Panel - Detect', 'description':...

Seeyon OA A6 initDataAssess.jsp - Information Disclosure Detection

Seeyon OA A6 initDataAssess.jsp has leaked user sensitive information, attacker can use the obtained username to blast the user's password to enter the background for further attacks. !/usr/bin/env python3 -- coding: utf-8 -- """Seeyon OA A6 initDataAssess.""" from kittysploit import from...

Detect Selea Targa IP OCR-ANPR Camera

Various version of the Selea Targa IP OCR-ANPR Camera are vulnerable to an Unauthenticated RTP/RTSP/M-JPEG Stream Disclosure flaw !/usr/bin/env python3 -- coding: utf-8 -- """Various version of the Selea Targa IP OCR-ANPR Camera are vulnerable to an Unauthenticated RTP/RTSP/M-JPEG Str.""" from...

SendGrid Env File Exposure Detection

SendGrid file is exposed containing environment variables. !/usr/bin/env python3 -- coding: utf-8 -- """SendGrid file is exposed containing environment variables.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Service Now - Title Injection Detection

Detects Service Now - Title Injection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Service Now - Title Injection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Service Now - Title Injection Detection',...

Service Account Credentials File Disclosure Detection

Service Account Credentials internal file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Service Account Credentials internal file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Service Account...

SevOne NMS Network Manager Detection

Detects SevOne NMS Network Manager. !/usr/bin/env python3 -- coding: utf-8 -- """Detects SevOne NMS Network Manager.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SevOne NMS Network Manager Detection', 'description...

ShardingSphere ElasticJob UI Panel Detection

An ShardingSphere ElasticJob UI panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An ShardingSphere ElasticJob UI panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ShardingSphere...

SEO King - Shopify App — Installer Detection

Shopify App is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Shopify App is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Silver Peak / HPE Aruba EdgeConnect - Orchestrator Panel Detection

Silver Peak now HPE Aruba Networking EdgeConnect SD-WAN Orchestrator is a centralised management platform for EdgeConnect SD-WAN appliances. The web portal is commonly exposed on HTTPS ports including 8443. !/usr/bin/env python3 -- coding: utf-8 -- """Silver Peak now HPE Aruba Networking...

Sitecore CMS - Detect

Detect Sitecore Content Management System CMS websites based on a redirect from the sitecore media handler URL pattern to the notfound.aspx page. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Sitecore Content Management System CMS websites based on a redirect from the sitecore media handler...

SKYSEA Client View Panel - Detect

SKYSEA Client View panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SKYSEA Client View panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SKYSEA Client View Panel - Detect',...

Slurm HPC Dashboard - Detect

Slurm HPC Dashboard was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Slurm HPC Dashboard was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Slurm HPC Dashboard - Detect', 'description': 'Slurm HP...

SmartStore Detect

Detects SmartStore Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects SmartStore Detect.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SmartStore Detect', 'description': 'Detects SmartStore...

SMTP4Dev Interface - Exposed Detection

Publicly exposed smtp4dev interface allowing access to intercepted emails and test configurations. !/usr/bin/env python3 -- coding: utf-8 -- """Publicly exposed smtp4dev interface allowing access to intercepted emails and test configurations.""" from kittysploit import from...

SoftEther VPN Panel - Detect

SoftEther VPN panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SoftEther VPN panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SoftEther VPN Panel - Detect', 'description': 'SoftEthe...