WebUI 1.5b6 - Remote Code Execution Detection

WebUI 1.5b6 is vulnerable to remote code execution because the 'mainfile.php' endpoint allows remote attackersto execute arbitrary code via the 'Logon' parameter. !/usr/bin/env python3 -- coding: utf-8 -- """WebUI 1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Web Suite Detect

Detects Web Suite Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Web Suite Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Web Suite Detect', 'description': 'Detects Web Suite Detect.', 'author'...

Web Viewer for Samsung DVR - Detect

Detects Web Viewer for Samsung DVR - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Web Viewer for Samsung DVR - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Web Viewer for Samsung DVR -...

Wildfly - Default Admin Login Detection

Wildfly default admin login credentials were successful. !/usr/bin/env python3 -- coding: utf-8 -- """Wildfly default admin login credentials were successful.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Wildfly -...

Woodpecker - Detect

Woodpecker was detected — a lightweight, powerful CI/CD engine with great extensibility. !/usr/bin/env python3 -- coding: utf-8 -- """Woodpecker was detected — a lightweight, powerful CI/CD engine with great extensibility.""" from kittysploit import from lib.protocols.http.httpclient import...

WordPress Wordfence - Rules File Disclosure Detection

The Wordfence Security plugin for WordPress stores configuration files in the /wp-content/wflogs/ directory. These files may be accessible without authentication and can expose sensitive configuration data, firewall rules, attack logs, and internal paths. !/usr/bin/env python3 -- coding: utf-8 --...

WordPress DB Backup Detection

This template checks for exposed database in wordpress. !/usr/bin/env python3 -- coding: utf-8 -- """This template checks for exposed database in wordpress.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WordPress D...

WordPress LazyLoad Plugin - Full Path Disclosure Detection

WordPress Plugin LazyLoad files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin LazyLoad files are publicly accessible without ABSPATH...

Workerman Websocket Detection

Detects Workerman Websocket Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Workerman Websocket Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Workerman Websocket Detection', 'description'...

VMware Workspace ONE UEM Airwatch Login Panel - Detect

VMware Workspace ONE UEM Airwatch login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """VMware Workspace ONE UEM Airwatch login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

AWS S3 keys Leak Detection

AWS S3 keys are exposed. !/usr/bin/env python3 -- coding: utf-8 -- """AWS S3 keys are exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AWS S3 keys Leak Detection', 'description': 'AWS S3 keys are exposed.',...

WordPress Plugin Arforms Listing Detection

Searches for sensitive directories present in the arforms plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for sensitive directories present in the arforms plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

WordPress Custom Post Type UI - Full Path Disclosure Detection

Detected WordPress Custom Post Type UI exposes internal file system path through direct file access. !/usr/bin/env python3 -- coding: utf-8 -- """Detected WordPress Custom Post Type UI exposes internal file system path through direct file access.""" from kittysploit import from...

WordPress Plugin Google Tag Manager - Full Path Disclosure Detection

WordPress Plugin Google Tag Manager files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin Google Tag Manager files are publicly accessibl...

Ellipsis Human Presence Technology <= 2.0.8 - Cross Site Scripting Detection

The 'page' GET parameter of the inc/protected-forms-table.php file was affected by a reflected XSS vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """The 'page' GET parameter of the inc/protected-forms-table.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

WordPress Plugin Email Subscribers Listing Detection

Searches for sensitive directories present in the email-subscribers plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for sensitive directories present in the email-subscribers plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

WordPress user registration enabled Detection

Detects WordPress user registration enabled. !/usr/bin/env python3 -- coding: utf-8 -- """Detects WordPress user registration enabled.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WordPress user registration enabl...

Reality Estate Multipurpose WP-Theme < 2.5.3 - Cross-Site Scripting Detection

Reflected XSS was discovered in the 'Reality | Estate Multipurpose WordPress Theme'. !/usr/bin/env python3 -- coding: utf-8 -- """Reflected XSS was discovered in the 'Reality | Estate Multipurpose WordPress Theme'.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

WP Smushit - Full Path Disclosure Detection

Smushit WordPress plugin contains a full path disclosure vulnerability due to improper access restrictions in its source files, allowing unauthenticated attackers to retrieve full server paths and aiding exploitation. !/usr/bin/env python3 -- coding: utf-8 -- """Smushit WordPress plugin contains ...

WordPress The Events Calendar - Full Path Disclosure Detection

WordPress The Events Calendar plugin is vulnerable to full path disclosure via direct access to plugin files. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress The Events Calendar plugin is vulnerable to full path disclosure via direct access to plugin files.""" from kittysploit import from...

WordPress WPFront Scroll Top - Full Path Disclosure Detection

WordPress Plugin WPFront Scroll Top plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin WPFront Scroll Top plugin files are...

Xinference Panel - Detect

Xinference Xorbits Inference is a powerful and versatile library designed to serve language, speech recognition, and multimodal models !/usr/bin/env python3 -- coding: utf-8 -- """Xinference Xorbits Inference is a powerful and versatile library designed to serve language, speech recognit.""" from...

XSpeeder Login - Detect

Detects the presence of XSpeeder router login panels. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of XSpeeder router login panels.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'XSpeeder Login ...

X-Recruiting Header Detection

Websites that advertise jobs via HTTP headers !/usr/bin/env python3 -- coding: utf-8 -- """Websites that advertise jobs via HTTP headers.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'X-Recruiting Header Detection'...

YesWiki Panel - Detect

YesWiki panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """YesWiki panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'YesWiki Panel - Detect', 'description': 'YesWiki panel was...

Yopass Panel - Detect

Yopass panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Yopass panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Yopass Panel - Detect', 'description': 'Yopass panel was detected.',...

YPAREO Panel - Detect

YPAREO was detected — an Enterprise Resource Planning system. !/usr/bin/env python3 -- coding: utf-8 -- """YPAREO was detected — an Enterprise Resource Planning system.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

ZenML Dashboard Panel - Detect

Detects ZenML Dashboard Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects ZenML Dashboard Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ZenML Dashboard Panel - Detect',...

ZEROF Web Server Detect

Detects ZEROF Web Server Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects ZEROF Web Server Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ZEROF Web Server Detect', 'description': 'Detects ZEROF W...

Zimbra Panel - Detect

Zimbra panel was detected. Zimbra provides open source server and client software for messaging and collaboration. !/usr/bin/env python3 -- coding: utf-8 -- """Zimbra panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclien...

Fortinet Forticlient Endpoint Management Server - SQL Injection Detection

A improper neutralization of special elements used in an sql command 'sql injection' in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7.0.1 through 7.0.10 allows attacker to execute unauthorized code or commands via specially crafted packets. !/usr/bin/env python3 -- coding:...

DeleGate PROXY-FTP Service - Detect

DeleGate PROXY-FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """DeleGate PROXY-FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'DeleGate...

Erlang Port Mapper Daemon Detection

The erlang port mapper daemon is used to coordinate distributed erlang instances. His job is to keep track of which node name listens on which address. Hence, epmd map symbolic node names to machine addresses. !/usr/bin/env python3 -- coding: utf-8 -- """The erlang port mapper daemon is used to...

Fortinet FGFM protocol - Detect

FortiGate to FortiManager Protocol FGFM was detected. !/usr/bin/env python3 -- coding: utf-8 -- """FortiGate to FortiManager Protocol FGFM was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient:...

GlobalSCAPE Secure FTP Service - Detect

GlobalSCAPE Secure FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """GlobalSCAPE Secure FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name':...

IBM FTP CS Service - Detect

IBM FTP CS service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """IBM FTP CS service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'IBM FTP CS Service -...

Microsoft FTP Service Detect

The File Transfer Protocol FTP is a standard network protocol used to transfer computer files between a client and server on a computer network. !/usr/bin/env python3 -- coding: utf-8 -- """The File Transfer Protocol FTP is a standard network protocol used to transfer computer files between a...

Network Camera FTP Service - Detect

Network Camera FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Network Camera FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'Network...

Rpcbind Portmapper - Detect

Rpcbind portmapper was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Rpcbind portmapper was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'Rpcbind Portmapper -...

SIP OPTIONS Detection

Sends a SIP OPTIONS request over TCP then UDP fallback to fingerprint PBX / VoIP endpoints on port 5060. !/usr/bin/env python3 -- coding: utf-8 -- """Detect SIP services via OPTIONS probe TCP then UDP.""" from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient from...

Telnet Detection

Telnet is a network protocol used to virtually access a computer and to provide a two-way, collaborative and text-based communication channel between two machines. !/usr/bin/env python3 -- coding: utf-8 -- """Telnet is a network protocol used to virtually access a computer and to provide a two-wa...

SkyCaiji Admin Panel - Detect

SkyCaiji admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SkyCaiji admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SkyCaiji Admin Panel - Detect', 'description':...

SnapComms Content Manager Panel - Detect

SnapComms Content Manager was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SnapComms Content Manager was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SnapComms Content Manager Panel - Detect',...

Snapdrop Detect

Snapdrop panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Snapdrop panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Snapdrop Detect', 'description': 'Snapdrop panel was detected.',...

Socks5 VPN - Sensitive File Disclosure Detection

Information Leakage in the Socks5 VPN login system of Wheilton e-Ditong, and the administrator account password can be obtained by visiting a specially crafted URL. !/usr/bin/env python3 -- coding: utf-8 -- """Information Leakage in the Socks5 VPN login system of Wheilton e-Ditong, and the...

Apache Solr Admin Panel - Detect

Apache Solr admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Solr admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Solr Admin Panel - Detect', 'description...

Sophos Firewall Login Panel - Detect

Sophos Firewall login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Sophos Firewall login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sophos Firewall Login Panel - Detect',...

Splash - Detect

Splash rendering service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Splash rendering service was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Splash - Detect', 'description': 'Splash...

SpotWeb Login Panel - Detect

Detects SpotWeb Login Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects SpotWeb Login Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SpotWeb Login Panel - Detect', 'description':...

Spring Boot Scheduledtasks Actuator Panel - Detect

Spring Boot Scheduledtasks Actuator panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Spring Boot Scheduledtasks Actuator panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Spring Boot...