Pagespeed Global Admin - Detect

Pagespeed Global Admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Pagespeed Global Admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pagespeed Global Admin - Detect',...

Jalios JCMS Login Panel - Detect

Jalios JCMS login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Jalios JCMS login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Jalios JCMS Login Panel - Detect', 'description...

Deskpro On-Premise Controller - Default Page Detect

Deskpro On-Premise Controller default page detected. !/usr/bin/env python3 -- coding: utf-8 -- """Deskpro On-Premise Controller default page detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Deskpro On-Premis...

Forgejo Installation Page - Exposure Detection

Checks for the presence of a Forgejo Installer Page. !/usr/bin/env python3 -- coding: utf-8 -- """Checks for the presence of a Forgejo Installer Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Forgejo...

Silver Peak / HPE Aruba EdgeConnect - Orchestrator Panel Detection

Silver Peak now HPE Aruba Networking EdgeConnect SD-WAN Orchestrator is a centralised management platform for EdgeConnect SD-WAN appliances. The web portal is commonly exposed on HTTPS ports including 8443. !/usr/bin/env python3 -- coding: utf-8 -- """Silver Peak now HPE Aruba Networking...

Ecology Syncuserinfo - SQL Injection Detection

Ecology Syncuserinfo contains a SQL injection vulnerability via a GET request. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. !/usr/bin/env python3 -- coding: utf-8 --...

WordPress Solid Security < 9.0.1 - Unauthenticated Login Page Disclosure Detection

WordPress Solid Security formerly iThemes Security/Better WP Security plugin before 9.0.1 is vulnerable to login page disclosure. When the Hide Backend feature is enabled and comments require user registration, the secret login URL token is exposed in the HTML source via the itsec-hb-token...

Webigniter 28.7.23 - Cross-Site Scripting Detection

The value of the redirect request parameter is copied into the value of an HTML tag attribute which is encapsulated in double quotation marks. The payload ycsz3"alert1bn76w was submitted in the redirect parameter. This input was echoed unmodified in the application's response. By using this Java...

CudaTel Login Panel - Detect

CudaTel login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """CudaTel login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'CudaTel Login Panel - Detect', 'description': 'CudaTel...

Virtua Software Panel - Detect

Virtua Software panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Virtua Software panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Virtua Software Panel - Detect', 'description':...

Xlight FTP Service Detect

The File Transfer Protocol FTP is a standard network protocol used to transfer computer files between a client and server on a computer network. !/usr/bin/env python3 -- coding: utf-8 -- """The File Transfer Protocol FTP is a standard network protocol used to transfer computer files between a...

Traefik Dashboard Panel - Detect

Traefik Dashboard panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Traefik Dashboard panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Traefik Dashboard Panel - Detect', 'description...

WordPress AddToAny Share Buttons Plugin - Full Path Disclosure Detection

The AddToAny Share Buttons plugin for WordPress was detected to be vulnerable to Full Path Disclosure, allowing unauthenticated access to the full application path. !/usr/bin/env python3 -- coding: utf-8 -- """The AddToAny Share Buttons plugin for WordPress was detected to be vulnerable to Full...

Fortra FileCatalyst - Anonymous Access Detection

Detects Fortra FileCatalyst web interfaces that allow anonymous or guest access. FileCatalyst is a managed file transfer solution, and anonymous access to its portal can expose sensitive files and configuration if not properly secured. This template checks for publicly accessible instances with...

DefectDojo Login Panel - Detect

DefectDojo login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """DefectDojo login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'DefectDojo Login Panel - Detect', 'description':...

SpotWeb Login Panel - Detect

Detects SpotWeb Login Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects SpotWeb Login Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SpotWeb Login Panel - Detect', 'description':...

Device42 Panel - Detect

Device42 was detected — a Discovery, Asset Management and Dependency Mapping for Data Center and Cloud. !/usr/bin/env python3 -- coding: utf-8 -- """Device42 was detected — a Discovery, Asset Management and Dependency Mapping for Data Center and Cloud.""" from kittysploit import from...

SPIP Install - Exposure Detection

SPIP is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """SPIP is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Rockwell Automation FactoryTalk ViewPoint - Panel Detection

Rockwell Automation FactoryTalk ViewPoint is a web-based HMI that allows remote monitoring and control of industrial automation systems from a browser. It provides access to FactoryTalk View Machine Edition and Site Edition displays. Exposed instances may allow unauthorised access to industrial...

Gogs (Go Git Service) - Installer Detection

Go Git Service installer panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Go Git Service installer panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Gogs Go Git Service - Installer...

SHOUTcast Server Panel - Detect

SHOUTcast Server panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SHOUTcast Server panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SHOUTcast Server Panel - Detect', 'description':...

Parallels HTML5 Client Login Panel - Detect

Parallels HTML5 Client login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Parallels HTML5 Client login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Parallels HTML5 Client...

KACO New Energy Solar Inverter - Detect

KACO new energy is a solar inverter manufacturer. Their inverters include a built-in web server that serves compressed HTML over HTTP for monitoring inverter status and energy production data. Devices are commonly deployed on residential and commercial solar installations. !/usr/bin/env python3 -...

Gene6 FTP Service - Detect

Gene6 FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Gene6 FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'Gene6 FTP Service - Detect',...

iPlanet Messaging Server IMAP Protocol - Detection

iPlanet Messaging Server IMAP protocol was detected. !/usr/bin/env python3 -- coding: utf-8 -- """iPlanet Messaging Server IMAP protocol was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: in...

APC UPC Multimon Status Page - Detect

Multimon UPS status page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Multimon UPS status page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'APC UPC Multimon Status Page - Detect',...

BookStack Login Panel - Detect

Bookstack login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Bookstack login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'BookStack Login Panel - Detect', 'description':...

UniFi Wizard Installer Detection

UniFi Wizard is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """UniFi Wizard is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclien...

Kubelet Healthz Detection

Scans for kubelet healthz !/usr/bin/env python3 -- coding: utf-8 -- """Scans for kubelet healthz.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kubelet Healthz Detection', 'description': 'Scans for kubele...

vBulletin - Full Path Disclosure Detection

Detects vBulletin - Full Path Disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects vBulletin - Full Path Disclosure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'vBulletin - Full Path Disclosure...

Versa Analytics Server Detection

Detects Versa Analytics Server Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Versa Analytics Server Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Versa Analytics Server Detection',...

Saia PCD Web Server Panel - Detect

Saia PCD Web Server panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Saia PCD Web Server panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Saia PCD Web Server Panel - Detect',...

Sharefile Login - Panel Detection

ShareFile is a cloud-based file sharing and collaboration platform that provides secure access to files from anywhere. !/usr/bin/env python3 -- coding: utf-8 -- """ShareFile is a cloud-based file sharing and collaboration platform that provides secure access to files from a.""" from kittysploit...

Loytec Device Info Detection

Loytec Device info panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Loytec Device info panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Loytec Device Info Detection', 'description':...

FlightPath Login Panel - Detect

FlightPath login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """FlightPath login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'FlightPath Login Panel - Detect', 'description':...

kkFileView 4.0.0 - Cross-Site Scripting Detection

kkFileView 4.0.0 contains multiple cross-site scripting vulnerabilities via the urls and currentUrl parameters at /controller/OnlinePreviewController.java. !/usr/bin/env python3 -- coding: utf-8 -- """kkFileView 4.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

SeaCMS V6.4.5 RCE Detection

A vulnerability in SeaCMS allows remote unauthenticated attackers to execute arbitrary PHP code. !/usr/bin/env python3 -- coding: utf-8 -- """A vulnerability in SeaCMS allows remote unauthenticated attackers to execute arbitrary PHP code.""" from kittysploit import from...

PHPJabbers PHP Forum Script 3.0 - Cross-Site Scripting Detection

PhpJabbers PHP Forum Script 3.0 is vulnerable to Cross Site Scripting XSS via the keyword parameter. !/usr/bin/env python3 -- coding: utf-8 -- """PhpJabbers PHP Forum Script 3.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

WordPress AcyMailing <7.5.0 - Open Redirect Detection

WordPress AcyMailing plugin before 7.5.0 contains an open redirect vulnerability due to improper sanitization of the redirect parameter. An attacker turning the request from POST to GET can craft a link containing a potentially malicious landing page and send it to the user. !/usr/bin/env python3...

Oracle E-Business Suite <=12.2 - Authentication Bypass Detection

Oracle E-Business Suite component: Manage Proxies 12.1 and 12.2 are susceptible to an easily exploitable vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise it by self-registering for an account. Successful attacks of this vulnerability can result in...

Dell Wyse Management Suite Login Panel - Detect

Dell Wyse Management Suite login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Dell Wyse Management Suite login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dell Wyse...

Vite Configuration - File Exposure Detection

The vite.config.js file is used to customize the behavior of Vite and specify various settings for your project. !/usr/bin/env python3 -- coding: utf-8 -- """The vite.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Vikunja Login Panel - Detect

Vikunja login panel was detected. Vikunja is a self-hosted to-do and project management application. !/usr/bin/env python3 -- coding: utf-8 -- """Vikunja login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info...

LearnPress < 4.2.6.8.1 - Information Disclosure Detection

LearnPress – WordPress LMS Plugin contains a sensitive information exposure caused by incorrect implementation of getitemspermissionscheck function in all versions up to 4.2.6.8, letting unauthenticated attackers extract user emails and basic information. !/usr/bin/env python3 -- coding: utf-8 --...

Detect Dell iDRAC8

Detected The Integrated Dell Remote Access Controller, iDRAC is designed for secure local and remote server management and helps IT administrators deploy, update and monitor Dell EMC PowerEdge servers. !/usr/bin/env python3 -- coding: utf-8 -- """Detected The Integrated Dell Remote Access...

Directus - Detect

Directus is a content manager with dynamic access API generation and transparent integration with the main databases. !/usr/bin/env python3 -- coding: utf-8 -- """Directus is a content manager with dynamic access API generation and transparent integration with the main dat.""" from kittysploit...

Jenkins - Remote Code Execution Detection

Jenkins is susceptible to a remote code execution vulnerability due to accessible script functionality. !/usr/bin/env python3 -- coding: utf-8 -- """Jenkins is susceptible to a remote code execution vulnerability due to accessible script functionality.""" from kittysploit import from...

Universal Media Server v13.2.1 - Cross Site Scripting Detection

Universal Media Server v13.2.1 CMS v2.0 was discovered to contain a reflected cross-site scripting XSS vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """Universal Media Server v13.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Typo3 Directory Listing Detection

Detects directory listing enabled on the TYPO3 temp directory. The typo3temp folder contains cached files, compiled assets, and temporary data that may reveal sensitive information about the application structure and configuration. !/usr/bin/env python3 -- coding: utf-8 -- """Detects directory...

Apache Zeppelin detect

Detects Apache Zeppelin detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Apache Zeppelin detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Zeppelin detect', 'description': 'Detects Apache...