Klog Server Panel - Detect

Klog Server panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Klog Server panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Klog Server Panel - Detect', 'description': 'Klog Serve...

phpspec Config - Detect

phpspec configuration information was detected. !/usr/bin/env python3 -- coding: utf-8 -- """phpspec configuration information was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'phpspec Config - Detect',...

NETGEAR Router Panel - Detect

NETGEAR router panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """NETGEAR router panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'NETGEAR Router Panel - Detect',...

Icinga Web 2 Installer Exposure Detection

Icinga Web 2 installer/setup wizard is publicly accessible. The setup page at /icingaweb2/setup exposes the configuration wizard which guides through full application configuration including database credentials, authentication backends, and admin account creation. While a setup token is required...

Nokia Nuage Networks VSP - Dashboard Panel Detection

Nokia Nuage Networks VSP Virtualized Services Platform is a software-defined networking platform for enterprise and service provider SDN/NFV deployments. The web dashboard is exposed on ports 8443, 9090, or 11443. !/usr/bin/env python3 -- coding: utf-8 -- """Nokia Nuage Networks VSP Virtualized...

Check Point FireWall-1 FTP Service - Detect

Check Point FireWall-1 FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Check Point FireWall-1 FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info =...

Network Camera FTP Service - Detect

Network Camera FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Network Camera FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'Network...

ShowDoc Panel Detection

ShowDoc panel was detected. ShowDoc was a tool for documenting APIs and interfaces. !/usr/bin/env python3 -- coding: utf-8 -- """ShowDoc panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ShowDoc Pan...

TeamPass Panel - Detect

TeamPass panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """TeamPass panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'TeamPass Panel - Detect', 'description': 'TeamPass pane...

WebcomCo - Panel Detection

Detects WebcomCo - Panel. !/usr/bin/env python3 -- coding: utf-8 -- """Detects WebcomCo - Panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WebcomCo - Panel Detection', 'description': 'Detects WebcomCo - Panel.'...

NetBSD FTP Service - Detect

NetBSD FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """NetBSD FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'NetBSD FTP Service -...

DiskStation FTP Service - Detect

DiskStation FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """DiskStation FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'DiskStation FTP...

Beckhoff TwinCAT HMI Server - Login Panel Detection

Beckhoff TwinCAT HMI Human Machine Interface Server is part of the TwinCAT industrial automation platform used in manufacturing, robotics, and process automation. It exposes a web-based HMI accessible via browser for monitoring and controlling PLC-driven systems. !/usr/bin/env python3 -- coding:...

Social Metrics Tracker <= 1.6.8 - Unauthorised Data Export Detection

The lack of proper authorisation when exporting data from the plugin could allow unauthenticated users to get information about the posts and page of the blog, including their author's username and email. !/usr/bin/env python3 -- coding: utf-8 -- """The lack of proper authorisation when exporting...

Ntop Detect Panel - Detect

Ntop Detect panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ntop Detect panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ntop Detect Panel - Detect', 'description': 'Ntop Detect...

AirOS Panel - Detect

AirOS panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """AirOS panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AirOS Panel - Detect', 'description': 'AirOS panel was detected.',...

3Com 3CDaemon FTP Service - Detect

3Com 3CDaemon FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """3Com 3CDaemon FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': '3Com 3CDaemo...

Postgres Exporter Metrics Detection

Postgres Exporter Metrics is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Postgres Exporter Metrics is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Postgres Exporter Metrics Detection',...

GYRA Master Admin Login Panel - Detect

GYRA Master Admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """GYRA Master Admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GYRA Master Admin Login Panel -...

LUA Runtime Error - Page Detection

Detects LUA Runtime Error - Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects LUA Runtime Error - Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LUA Runtime Error - Page Detection', 'description':...

GUDE - Default Login Detection

GUDE 2301 and 2302 default administrator login credentials admin:admin were detected. !/usr/bin/env python3 -- coding: utf-8 -- """GUDE 2301 and 2302 default administrator login credentials admin:admin were detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Remotely Registration Enabled Detection

Checks if the Remotely self-hosted remote desktop and collaboration web application has its user registration endpoint enabled, potentially allowing anyone to register without invitation. !/usr/bin/env python3 -- coding: utf-8 -- """Checks if the Remotely self-hosted remote desktop and...

Vaadin Framework - Detect

Detects Vaadin web framework used for building Java/TypeScript web applications. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Vaadin web framework used for building Java/TypeScript web applications.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Filezilla Detection

Filezilla internal file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Filezilla internal file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Filezilla Detection', 'description': 'Filezilla...

TNFTPD Service - Detect

TNFTPD Service service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """TNFTPD Service service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'TNFTPD Service -...

DeleGate PROXY-FTP Service - Detect

DeleGate PROXY-FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """DeleGate PROXY-FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'DeleGate...

Kanboard Login Panel - Detect

Kanboard login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Kanboard login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kanboard Login Panel - Detect', 'description':...

WordPress The Events Calendar - Full Path Disclosure Detection

WordPress The Events Calendar plugin is vulnerable to full path disclosure via direct access to plugin files. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress The Events Calendar plugin is vulnerable to full path disclosure via direct access to plugin files.""" from kittysploit import from...

WordPress super-forms Plugin Directory Listing Detection

Searches for sensitive directories present in the super-forms plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for sensitive directories present in the super-forms plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

TrueNAS Panel - Detect

TrueNAS scale is a free and open-source NAS solution !/usr/bin/env python3 -- coding: utf-8 -- """TrueNAS scale is a free and open-source NAS solution.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'TrueNAS Panel -...

Couchbase Buckets Unauthenticated REST API - Detect

Couchbase Buckets REST API without authentication was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Couchbase Buckets REST API without authentication was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Ampache Debug Page Detection

Detects Ampache Debug Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Ampache Debug Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ampache Debug Page Detection', 'description': 'Detects Ampache Debu...

Office Web Apps Server Panel - Detect

Microsoft Office Web App Login Panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Microsoft Office Web App Login Panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Office Web Apps...

IBM Websphere Friendly Path Exposure Detection

Finds friendly path exposed that can be used to access signup page and create new user accounts. !/usr/bin/env python3 -- coding: utf-8 -- """Finds friendly path exposed that can be used to access signup page and create new user accounts.""" import re from kittysploit import from...

ADFS Detect

Detects ADFS with forms-based authentication enabled. !/usr/bin/env python3 -- coding: utf-8 -- """Detects ADFS with forms-based authentication enabled.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ADFS Detect',...

Firebase / Google Browser API Key Analysis

Scrape exposed Google browser API keys AIza... from JS/HTML, then probe Identity Toolkit getProjectConfig to see if the key is live and which project it belongs to. Useful against SPAs that leak Firebase web configs. !/usr/bin/env python3 -- coding: utf-8 -- """Extract Google/Firebase browser API...

Quantum Scalar i500 Login Panel - Detect

Quantum Scalar i500 login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Quantum Scalar i500 login panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Quantum Scalar i500...

WordPress Members / Membership & User Role Editor Plugin - Error Log Disclosure Detection

WordPress Members plugin is vulnerable to error log disclosure via direct access to plugin files. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Members plugin is vulnerable to error log disclosure via direct access to plugin files.""" from kittysploit import from...

Amazon EC2 Server Detect

Detects Amazon EC2 Server Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Amazon EC2 Server Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Amazon EC2 Server Detect', 'description': 'Detects Amaz...

CAREL Boss Mini - Login Panel Detected

CAREL Boss Mini login panel was detected. Boss Mini is a local supervisor solution by CAREL used for monitoring and managing HVAC/R systems in commercial facilities. Exposed panels may indicate misconfigured network segmentation. !/usr/bin/env python3 -- coding: utf-8 -- """CAREL Boss Mini login...

Slurm HPC Dashboard - Detect

Slurm HPC Dashboard was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Slurm HPC Dashboard was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Slurm HPC Dashboard - Detect', 'description': 'Slurm HP...

Axel WebServer - Panel Detect

Axel WebServer panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Axel WebServer panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Axel WebServer - Panel Detect',...

FeatherPanel Panel - Detect

FeatherPanel login interface was detected. !/usr/bin/env python3 -- coding: utf-8 -- """FeatherPanel login interface was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'FeatherPanel Panel - Detect',...

Opto 22 groov - Panel Detection

Opto 22 groov is an IIoT and industrial automation platform providing browser-based HMI and edge computing capabilities. The groov View and groov Admin interfaces allow control of industrial devices and data acquisition systems. Exposed instances may provide unauthenticated access to industrial...

Nutanix Web Console Login Panel - Detect

Nutanix Web Console login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Nutanix Web Console login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Nutanix Web Console Login Panel...

WordPress Joinchat - Full Path Disclosure Detection

WordPress Plugin Joinchat files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin Joinchat files are publicly accessible without ABSPATH...

Hoppscotch Panel - Detect

Hoppscotch panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Hoppscotch panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Hoppscotch Panel - Detect', 'description': 'Hoppscotch...

EmpireCMS Detect

Detects EmpireCMS Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects EmpireCMS Detect.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'EmpireCMS Detect', 'description': 'Detects EmpireCMS Detect.'...

Alma Installation Exposure Detection

Alma is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Alma is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

SAPControl GetVersionInfo - Detect

Detected SAP systems where the SAP Start Service sapstartsrv SAPControl SOAP interface exposes the GetVersionInfo web method without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Detected SAP systems where the SAP Start Service sapstartsrv SAPControl SOAP interface exposes the...