Kiteworks PCN Panel - Detect

Kiteworks PCN Login Panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Kiteworks PCN Login Panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kiteworks PCN Panel - Detect', 'description...

Spring Cloud Config Server - Local File Inclusion Detection

Spring Cloud Config Server versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user or attacker can send a request using a specially crafte...

Hardcoded .npmrc AuthToken Detection

Detects Hardcoded .npmrc AuthToken. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Hardcoded .""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Hardcoded .npmrc AuthToken Detection', 'description': 'Detects...

PhpMyAdmin Scripts - Remote Code Execution Detection

PhpMyAdmin Scripts 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 are susceptible to a remote code execution in setup.php that allows remote attackers to inject arbitrary PHP code into a configuration file via the save action. Combined with the ability to save files on server, this can allow...

Greenbone Security Assistant Panel - Detect

Greenbone Security Assistant Web Panel is detected !/usr/bin/env python3 -- coding: utf-8 -- """Greenbone Security Assistant Web Panel is detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Greenbone Security...

Cisco Prime Infrastructure Panel - Detect

A Cisco Prime Infrastructure login panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """A Cisco Prime Infrastructure login panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cisco Pri...

Avigilon Login Panel - Detect

Avigilon login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Avigilon login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Avigilon Login Panel - Detect', 'description':...

Apache NiFi - Unauthenticated API Exposure Detection

Detects unauthenticated access to /nifi-api/process-groups/root RCE attack surface when API auth is disabled. Does not confirm command execution. !/usr/bin/env python3 -- coding: utf-8 -- """Apache NiFi is designed for data streaming.""" from kittysploit import from lib.protocols.http.httpclient...

Keycloak Admin Console Configuration Disclosure Detection

Detected Keycloak admin console configuration was exposing realm name, client ID, SSL requirements, and authentication server URL enabling reconnaissance and targeted authentication attacks. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Keycloak admin console configuration was exposing...

OfficeKeeper Admin Login Panel - Detect

OfficeKeeper admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """OfficeKeeper admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OfficeKeeper Admin Login Panel -...

ArcGIS Exposed REST API documentation Detection

ArcGIS REST API documentation was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """ArcGIS REST API documentation was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ArcGIS Exposed REST API...

OpenShift Assisted Installer Panel - Detect

OpenShift Assisted Installer panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """OpenShift Assisted Installer panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OpenShift Assisted...

CPPPO Ethernet/IP CIP Honeypot Default Configuration - Detect

Detected devices responding with the default configuration signature of the CPPPO Python-based Ethernet/IP CIP parser honeypot.This indicates systems likely running the default Conpot honeypot configuration for ICS using the Common Industrial Protocol CIP over Ethernet/IP. !/usr/bin/env python3 -...

Axxon Next Client Login - Detect

Axxon One is a limitlessly scalable video management software !/usr/bin/env python3 -- coding: utf-8 -- """Axxon One is a limitlessly scalable video management software.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

VSCode SFTP File Exposure Detection

It discloses sensitive files created by vscode-sftp for VSCode, contains SFTP/SSH server details and credentials. !/usr/bin/env python3 -- coding: utf-8 -- """It discloses sensitive files created by vscode-sftp for VSCode, contains SFTP/SSH server details and credentia.""" from kittysploit import...

WordPress Plugin WP Statistics Error Log Disclosure Detection

Detected exposed log files generated by the WP Statistics !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed log files generated by the WP Statistics.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Avtech AVN801 Network Camera Admin Panel - Detect

An Avtech AVN801 Network Camera administration panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An Avtech AVN801 Network Camera administration panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info ...

Audiobookshelf Login Panel - Detect

Detects Audiobookshelf Login Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Audiobookshelf Login Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Audiobookshelf Login Panel -...

Schneider Electric ClearSCADA - Panel Detection

ClearSCADA now branded as EcoStruxure Geo SCADA Expert is a Schneider Electric SCADA platform used in water, oil and gas, and utilities sectors. Exposed instances may provide unauthenticated access to industrial process data and control interfaces. !/usr/bin/env python3 -- coding: utf-8 --...

Laravel Login - Panel Detection

A Laravel login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """A Laravel login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Laravel Login - Panel Detection', 'description': 'A...

TeamSpeak 3 ServerQuery Detection

ServerQuery is a commandline based administration tool/feature of TeamSpeak 3 server. !/usr/bin/env python3 -- coding: utf-8 -- """ServerQuery is a commandline based administration tool/feature of TeamSpeak 3 server.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient...

KLR 300N Router - Exposed Installation Detection

Home router wireless KLR 300N setup page were Detected. !/usr/bin/env python3 -- coding: utf-8 -- """Home router wireless KLR 300N setup page were Detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'KLR 300N...

vRealize Operations Manager API - Server-Side Request Forgery Detection

vRealize Operations Manager API is susceptible to server-side request forgery. A malicious actor with network access to the vRealize Operations Manager API can steal administrative credentials or trigger remote code execution using CVE-2021-21983. !/usr/bin/env python3 -- coding: utf-8 --...

Mystic Stealer Panel - Detect

Mystic Stealer panel were detected. !/usr/bin/env python3 -- coding: utf-8 -- """Mystic Stealer panel were detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Mystic Stealer Panel - Detect', 'description':...

Joomla! Helpdesk Pro plugin <1.4.0 - Local File Inclusion Detection

Directory traversal vulnerability in the Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter in a ticket.downloadattachment task. !/usr/bin/env python3 -- coding: utf-8 -- """Directory traversal vulnerability in t...

Apache ActiveMQ Detection

Apache ActiveMQ is an open source message broker written in Java together with a full Java Message Service client. It provides "Enterprise Features" which in this case means fostering the communication from more than one client or server. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Active...

Digital Rebar - Local File Inclusion Detection

Digital Rebar versions 4.3.0, 4.3.2, 4.3.3, 4.4.0, and maybe others are vulnerable to local file inclusion because web requests can navigate outside of DRP controlled areas. !/usr/bin/env python3 -- coding: utf-8 -- """Digital Rebar versions 4.""" import re from kittysploit import from...

IBM Websphere Friendly Path Exposure Detection

Finds friendly path exposed that can be used to access signup page and create new user accounts. !/usr/bin/env python3 -- coding: utf-8 -- """Finds friendly path exposed that can be used to access signup page and create new user accounts.""" import re from kittysploit import from...

MinIO Browser Login Panel - Detect

MinIO Browser login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """MinIO Browser login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MinIO Browser Login Panel - Detect',...

Fastify Swagger-UI - Information Disclosure Detection

fastify-swagger-ui is a Fastify plugin for serving Swagger UI. Prior to 2.1.0, the default configuration of @fastify/swagger-ui without baseDir set will lead to all files in the module's directory being exposed via http routes served by the module. The vulnerability is fixed in v2.1.0. Setting th...

WordPress Modern Events Calendar Lite <5.16.5 - Sensitive Information Disclosure Detection

WordPress Modern Events Calendar Lite before 5.16.5 does not properly restrict access to the export files, allowing unauthenticated users to exports all events data in CSV or XML format. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Modern Events Calendar Lite before 5.""" from kittysplo...

Honeywell Scada Configuration File - Detect

Honeywell Scada configuration file was detected. The downloaded file opens with the file name and contains critical information about the destination address. !/usr/bin/env python3 -- coding: utf-8 -- """Honeywell Scada configuration file was detected.""" from kittysploit import from...

Joomla! Component Preventive And Reservation 1.0.5 - Local File Inclusion Detection

A directory traversal vulnerability in the Preventive & Reservation compreventive component 1.0.5 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf...

JsAPI Ticket Json Detection

JsAPI Ticket internal file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """JsAPI Ticket internal file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'JsAPI Ticket Json Detection', 'description':...

Kaeser Sigma Air Manager - Panel Detection

Detected exposed Kaeser Sigma Air Manager login panel !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed Kaeser Sigma Air Manager login panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kaeser Sigma A...

Apache ActiveMQ 6.x < 6.1.2 - Broken Access Control Detection

Apache ActiveMQ 6.x contains an unauthenticated API web context caused by default configuration lacking security measures in the Jetty server, letting anyone interact with broker APIs and messaging layers, exploit requires no authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Apache...

Apache ActiveMQ <=5.15.5 - Cross-Site Scripting Detection

Apache ActiveMQ versions 5.0.0 to 5.15.5 are vulnerable to cross-site scripting via the web based administration console on the queue.jsp page. The root cause of this issue is improper data filtering of the QueueFilter parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Apache ActiveMQ versio...

Amazon Web Services S3 Explorer - Detect

Amazon Web Services S3 Explorer page was detected. Page contains links to sensitive information. !/usr/bin/env python3 -- coding: utf-8 -- """Amazon Web Services S3 Explorer page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Basic Auth Detection

Detects Basic Auth Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Basic Auth Detection.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Basic Auth Detection', 'description': 'Detects Basic...

Jaeger UI Detection

Jaeger UI dashboard is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Jaeger UI dashboard is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Jaeger UI Detection', 'description': 'Jaeger UI dashboard i...

WordPress Aspose Importer & Exporter 1.0 - Local File Inclusion Detection

WordPress Aspose Importer & Exporter version 1.0 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Aspose Importer & Exporter version 1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: inf...

AstrBot WebUI Login Panel - Detect

Astrbot WebUI login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Astrbot WebUI login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AstrBot WebUI Login Panel - Detect',...

Hewlett-Packard FTP Service - Detect

Hewlett-Packard FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Hewlett-Packard FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name':...

WordPress Gwyn's Imagemap Selector <=0.3.3 - Cross-Site Scripting Detection

Wordpress Gwyn's Imagemap Selector plugin 0.3.3 and prior contains a reflected cross-site scripting vulnerability. It does not sanitize the id and class parameters before returning them back in attributes. !/usr/bin/env python3 -- coding: utf-8 -- """Wordpress Gwyn's Imagemap Selector plugin 0.""...

ZTE Cable Modem Web Shell Detection

ZTE F460 and F660 cable modems allows remote attackers to obtain administrative access via sendcmd requests to webshellcmd.gch, as demonstrated by using "set TelnetCfg" commands to enable a TELNET service with specified credentials. !/usr/bin/env python3 -- coding: utf-8 -- """ZTE F460 and F660...

Apache Struts2 S2-053 - Remote Code Execution Detection

Apache Struts 2.0.0 through 2.3.33 and 2.5 through 2.5.10.1 uses an unintentional expression in a Freemarker tag instead of string literals, which makes it susceptible to remote code execution attacks. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Struts 2.""" import re from kittysploit...

Hikvision - Authentication Bypass Detection

Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125, DS-2CD4x2xFWD Series V5.2.0 build 140721 to V5.4.0 Build 160414, DS-2CD4xx5 Series V5.2.0...

Eaton Intelligent Power Manager 1.6 - Directory Traversal Detection

Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via directory traversal, which can lead to sensitive information disclosure, denial of service and code execution. !/usr/bin/env python3 -- coding: utf-8 -- """Eaton Intelligent Power Manager v1.""" import re from kittysplo...

TOTOLINK A3002RU 1.0.8 - Information Disclosure Detection

TOTOLINK A3002RU firmware version 1.0.8 contains a vulnerability in which an unauthenticated attacker can obtain the plaintext admin password by making a GET request for password.htm. This allows remote attackers to gain administrative access without credentials. !/usr/bin/env python3 -- coding:...

NUUO NVRmini - Remote Command Execution Detection

NUUO NVRmini is vulnerable to unauthenticated remote command execution through the upgradehandle.php file. The vulnerability allows an attacker to execute arbitrary commands by manipulating the uploaddir parameter. !/usr/bin/env python3 -- coding: utf-8 -- """NUUO NVRmini is vulnerable to...