Huawei HG255s - Local File Inclusion Detection

Huawei HG255s is vulnerable to local file inclusion due to insufficient validation of the received HTTP requests. A remote attacker may access the local files on the device without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Huawei HG255s is vulnerable to local file inclusion due...

Vaultwarden Login Panel - Detect

Vaultwarden products was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Vaultwarden products was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Vaultwarden Login Panel - Detect', 'description':...

AppDynamics (Cisco) RUM - Detect

Detects AppDynamics Cisco End User Monitoring EUM artifacts. !/usr/bin/env python3 -- coding: utf-8 -- """Detects AppDynamics Cisco End User Monitoring EUM artifacts.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Joomla! Component jesectionfinder - Local File Inclusion Detection

A directory traversal vulnerability in the JExtensions JE Section/Property Finder jesectionfinder component for Joomla! allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the view parameter to index.php. !/usr/bin/env python3 -- coding: utf-8...

Prestashop Installer Exposure Detection

Prestashop is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Prestashop is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

UniGUI Framework - Detect

Checks for the presence of UniGUI framework and extracts its version along with the Sencha Ext JS version. !/usr/bin/env python3 -- coding: utf-8 -- """Checks for the presence of UniGUI framework and extracts its version along with the Sencha Ext JS version.""" import re from kittysploit import...

X-Recruiting Header Detection

Websites that advertise jobs via HTTP headers !/usr/bin/env python3 -- coding: utf-8 -- """Websites that advertise jobs via HTTP headers.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'X-Recruiting Header Detection'...

Laravel Nova - Unauthenticated Admin Panel Access Detection

Laravel Nova admin panel is accessible without authentication. Nova provides full CRUD access to application models and database records, making unauthenticated access a critical security risk. !/usr/bin/env python3 -- coding: utf-8 -- """Laravel Nova admin panel is accessible without...

Joomla! Component CCNewsLetter - Local File Inclusion Detection

A directory traversal vulnerability in the ccNewsletter comccnewsletter component 1.0.5 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter in a ccnewsletter action to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversa...

KodExplorer-detect

Detects KodExplorer-detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects KodExplorer-detect.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'KodExplorer-detect', 'description': 'Detects...

Fortinet Forticlient Endpoint Management Server - SQL Injection Detection

A improper neutralization of special elements used in an sql command 'sql injection' in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7.0.1 through 7.0.10 allows attacker to execute unauthorized code or commands via specially crafted packets. !/usr/bin/env python3 -- coding:...

VerneMQ Status Page Detection

VerneMQ Status Page is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """VerneMQ Status Page is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'VerneMQ Status Page Detection', 'description': 'VerneMQ...

EyouCms v1.6.3 - Information Disclosure Detection

EyouCms v1.6.3 was discovered to contain an information disclosure vulnerability via the component /custommodelpath/recruit.filelist.txt. !/usr/bin/env python3 -- coding: utf-8 -- """EyouCms v1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

SaltStack Salt <3002.5 - Auth Bypass Detection

SaltStack Salt before 3002.5 does not honor eauth credentials for the wheelasync client, allowing attackers to remotely run any wheel modules on the master. !/usr/bin/env python3 -- coding: utf-8 -- """SaltStack Salt before 3002.""" from kittysploit import from lib.protocols.http.httpclient impor...

WordPress Permalink Manager <2.2.15 - Cross-Site Scripting Detection

WordPress Permalink Manager Lite and Pro plugins before 2.2.15 contain a reflected cross-site scripting vulnerability. They do not sanitize and escape query parameters before outputting them back in the debug page. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Permalink Manager Lite and...

Apache JMeter Dashboard Login Panel - Detect

Detects the Apache JMeter Dashboard web UI distinct title and assets. !/usr/bin/env python3 -- coding: utf-8 -- """Apache JMeter Dashboard login panel detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "Apache...

ActiveMQ OpenWire Transport Detection

OpenWire is the native protocol that Apache ActiveMQ uses. It is designed for performance and size on the wire - sacrificing some ease of implementation with higher performance and reduced network bandwidth as a priority. !/usr/bin/env python3 -- coding: utf-8 -- """OpenWire is the native protoco...

C-Lodop Printer - Arbitrary File Read Detection

The C-Lodop printer has an arbitrary file reading vulnerability. By constructing a special URL, it can read any file in the system. !/usr/bin/env python3 -- coding: utf-8 -- """The C-Lodop printer has an arbitrary file reading vulnerability.""" from kittysploit import from...

Goliath Detection

Goliath is a non-blocking Ruby web server framework !/usr/bin/env python3 -- coding: utf-8 -- """Goliath is a non-blocking Ruby web server framework.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Goliath...

Dell IDRAC Panel - Detect

Dell IDRAC panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Dell IDRAC panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dell IDRAC Panel - Detect', 'description': 'Dell IDRAC panel...

Laravel Livewire - Detect

Detects the presence of Laravel Livewire, a full-stack framework for Laravel that builds dynamic interfaces. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of Laravel Livewire, a full-stack framework for Laravel that builds dynamic interfaces.""" from kittysploit import from...

MantisBT Login Panel - Detect

MantisBT login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """MantisBT login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MantisBT Login Panel - Detect', 'description':...

Lazy File Manager Detection

lfm.php file in exposed in Lazy File Manager. !/usr/bin/env python3 -- coding: utf-8 -- """lfm.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Lazy File Manager Detection', 'description': 'lfm.php file in exposed in...

OpenSIS 7.3 - SQL Injection Detection

OpenSIS Community Edition version 7.3 is vulnerable to SQL injection via the USERNAME parameter of index.php. !/usr/bin/env python3 -- coding: utf-8 -- """OpenSIS Community Edition version 7.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

WebcomCo - Panel Detection

Detects WebcomCo - Panel. !/usr/bin/env python3 -- coding: utf-8 -- """Detects WebcomCo - Panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WebcomCo - Panel Detection', 'description': 'Detects WebcomCo - Panel.'...

AWS CodeBuild Build Spec - Exposure Detection

Detected the presence of the AWS CodeBuild buildspec.yml file. This file contains build commands and settings that may disclose sensitive information about the application's build process and infrastructure. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the presence of the AWS CodeBuild...

Pipfile Config - Detect

Pipfile configuration information was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Pipfile configuration information was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pipfile Config - Detect',...

NETGEAR Routers - Serial Number Disclosure Detection

Multiple NETGEAR router models disclose their serial number which can be used to obtain the admin password if password recovery is enabled. !/usr/bin/env python3 -- coding: utf-8 -- """Multiple NETGEAR router models disclose their serial number which can be used to obtain the admin password if ."...

S3CMD Configuration - Detect

S3CMD configuration information was detected. !/usr/bin/env python3 -- coding: utf-8 -- """S3CMD configuration information was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'S3CMD Configuration - Detect',...

Symfony Security Configuration File - Detect

Symfony security configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Symfony security configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Symfony Security...

Auerswald COMfortel 1400/2600/3600 IP - Authentication Bypass Detection

Auerswald COMfortel 1400/2600/3600 IP is susceptible to an authentication bypass vulnerability. Inserting the prefix "/about/../" allows bypassing the authentication check for the web-based configuration management interface. This enables attackers to gain access to the login credentials used for...

Netis E1+ V1.2.32533 - WiFi Password Disclosure Detection

A vulnerability in Netis allows remote unauthenticated users to disclose the WiFi password of the remote device. !/usr/bin/env python3 -- coding: utf-8 -- """A vulnerability in Netis allows remote unauthenticated users to disclose the WiFi password of the remote devic.""" from kittysploit import...

Blazor Boot File Disclosure Detection

Exposed Blazor Boot a web framework developed by Microsoft config file. !/usr/bin/env python3 -- coding: utf-8 -- """Exposed Blazor Boot a web framework developed by Microsoft config file.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Graphql Ariadne Detect

Detects Graphql Ariadne Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Graphql Ariadne Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Graphql Ariadne Detect', 'description': 'Detects Graphql...

Sangfor EDR 3.2.17R1/3.2.21 - Remote Code Execution Detection

Sangfor EDR 3.2.17R1/3.2.21 allows remote unauthenticated users to to execute arbitrary commands. !/usr/bin/env python3 -- coding: utf-8 -- """Sangfor EDR 3.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

WordPress ManageWP Worker - Full Path Disclosure Detection

WordPress ManageWP Worker plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress ManageWP Worker plugin files are publicly accessible...

SVN wc.db File Exposure Detection

SVN wc.db file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """SVN wc.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SVN wc.db File Exposure Detection', 'description': 'SVN wc.db file is exposed.', 'author...

WordPress Easy Pricing Tables <3.2.1 - Cross-Site Scripting Detection

WordPress Easy Pricing Tables plugin before 3.2.1 contains a reflected cross-site scripting vulnerability. It does not sanitize and escape a parameter before reflecting it back in a page available to any user both authenticated and unauthenticated when a specific setting is enabled. !/usr/bin/env...

Micro Focus Application Lifecycle Management - Panel Detection

Micro Focus Application Lifecycle Management login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Micro Focus Application Lifecycle Management login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclien...

ESMTP - Detect

ESMTP was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ESMTP was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'ESMTP - Detect', 'description': 'ESMTP was detected....

Lotus Core CMS 1.0.1 - Local File Inclusion Detection

Lotus Core CMS 1.0.1 allows authenticated local file inclusion of .php files via directory traversal in the index.php pageslug parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Lotus Core CMS 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Moodle LTI module Reflected - Cross-Site Scripting Detection

A reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitization of user-supplied data in the LTI module. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's brows...

Kubelet Metrics Detection

Kube Metrics Server was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Kube Metrics Server was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kubelet Metrics Detection', 'description': 'Kube Metric...

WordPress Visual Form Builder <3.0.8 - Information Disclosure Detection

WordPress Visual Form Builder plugin before 3.0.8 contains a information disclosure vulnerability. The plugin does not perform access control on entry form export, allowing an unauthenticated user to export the form entries as CSV files using the vfb-export endpoint. !/usr/bin/env python3 --...

LiveZilla Server 8.0.1.0 - Cross-Site Scripting Detection

LiveZilla Server 8.0.1.0 is vulnerable to reflected cross-site scripting. !/usr/bin/env python3 -- coding: utf-8 -- """LiveZilla Server 8.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LiveZilla Server 8.0.1.0 -...

Joomla! Component com_gcalendar Suite 2.1.5 - Local File Inclusion Detection

A directory traversal vulnerability in the GCalendar comgcalendar component 2.1.5 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal...

Kafka Operation API - Cluster Detection

Kafka Operation API Cluster page was detected and appeared to be accessible without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Kafka Operation API Cluster page was detected and appeared to be accessible without authentication.""" from kittysploit import from...

Detect Microsoft SQL Server Reporting

Detects Detect Microsoft SQL Server Reporting. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Detect Microsoft SQL Server Reporting.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect Microsoft SQL Server...

WPS Hide Login <= 1.5.2.2 - Login Page Bypass Detection

WPS-Hide-Login plugin before 1.5.3 for WordPress contains an action=confirmaction protection bypass, letting attackers bypass security checks, exploit requires sending crafted requests. !/usr/bin/env python3 -- coding: utf-8 -- """WPS-Hide-Login plugin before 1.""" from kittysploit import from...

Speedtest Panel - Detection

Speedtest panel was discovered !/usr/bin/env python3 -- coding: utf-8 -- """Speedtest panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Speedtest Panel - Detection', 'description': 'Speedtest pane...