Dahua Web Service Panel - Detect

A Dahua admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """A Dahua admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dahua Web Service Panel - Detect',...

Voilà Panel - Detect

Voilà is an open-source tool that turns Jupyter Notebooks into standalone web applications. It is commonly used to share AI/ML dashboards and interactive data science tools. !/usr/bin/env python3 -- coding: utf-8 -- """Voilà is an open-source tool that turns Jupyter Notebooks into standalone web...

Saltbo/zpan Panel - Detect

Detects the presence of the Saltbo/zpan file management panel. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of the Saltbo/zpan file management panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name'...

GZ Forum Script 1.8 - Cross-Site Scripting Detection

Cross-site scripting XSS is an attack in which an attacker injects malicious executable scripts into the code of a trusted application or website. Attackers often initiate an XSS attack by sending a malicious link to a user and enticing the user to click it. !/usr/bin/env python3 -- coding: utf-8...

Gogs Login Panel - Detect

Gogs login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Gogs login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Gogs Login Panel - Detect', 'description': 'Gogs login panel...

Looker Login Panel - Detect

Looker login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Looker login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Looker Login Panel - Detect', 'description': 'Looker logi...

PgHero Dashboard Exposure Panel - Detect

PgHero Dashboard Exposure panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """PgHero Dashboard Exposure panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PgHero Dashboard Exposure Panel...

Cacti Log - Exposure Detection

Exposed Cacti log files cacti.log were detected. These files contain system statistics, error messages, and potentially sensitive information. They can also be used in log poisoning attacks. !/usr/bin/env python3 -- coding: utf-8 -- """Exposed Cacti log files cacti.""" import re from kittysploit...

Axxon Next Client Login - Detect

Axxon One is a limitlessly scalable video management software !/usr/bin/env python3 -- coding: utf-8 -- """Axxon One is a limitlessly scalable video management software.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

AirNotifier Login Panel - Detect

AirNotifier login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """AirNotifier login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AirNotifier Login Panel - Detect', 'description...

Microsoft SharePoint - List API Disclosure Detection

Detected exposed SharePoint lists-api endpoint without proper authentication, exposing site content and metadata. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed SharePoint lists-api endpoint without proper authentication, exposing site content and metada.""" from kittysploit import...

Detect Python Exposed Metrics

Information Disclosure of Garbage Collection !/usr/bin/env python3 -- coding: utf-8 -- """Information Disclosure of Garbage Collection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect Python Exposed Metrics',...

NSQ Admin Panel - Detect

NSQ admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """NSQ admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'NSQ Admin Panel - Detect', 'description': 'NSQ admin panel was...

O2 Router Setup Panel - Detect

O2 router setup panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """O2 router setup panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'O2 Router Setup Panel - Detect', 'description': 'O2...

Microsoft SharePoint - Master Page Disclosure Detection

Detected exposed SharePoint Master Page endpoints. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed SharePoint Master Page endpoints.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Microsoft SharePoint ...

Hrsale 2.0.0 - Local File Inclusion Detection

Hrsale 2.0.0 is vulnerable to local file inclusion. This exploit allow you to download any readable file from server without permission and login session !/usr/bin/env python3 -- coding: utf-8 -- """Hrsale 2.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclien...

Jenkins panel async-people Detection

Detects Jenkins panel async-people. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Jenkins panel async-people.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Jenkins panel async-people Detection', 'description...

IBM API Connect Developer Portal - Detect

IBM API Connect Developer Portal was detected. !/usr/bin/env python3 -- coding: utf-8 -- """IBM API Connect Developer Portal was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.osint.faviconhash import shodanmmh3 class ModuleScanner, Httpclient:...

WordPress Plugin Enable Media Replace - Log File Exposure Detection

The WordPress plugin "Enable Media Replace" enable-media-replace bundles a ShortPixel-based logger that writes a plugin-specific log file into the WordPress uploads directory, typically as wp-content/uploads/EnableMediaReplace.log. !/usr/bin/env python3 -- coding: utf-8 -- """The WordPress plugin...

Feast Feature Store - Detect

Detected Feast, an open-source feature store for managing and serving ML features. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Feast, an open-source feature store for managing and serving ML features.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Redmine Issues - Exposure Detection

Redmine instance exposed issues via the REST API without authentication. This could have leaked sensitive project information, issue details, and user data. !/usr/bin/env python3 -- coding: utf-8 -- """Redmine instance exposed issues via the REST API without authentication.""" from kittysploit...

NPM package.json Disclosure Detection

All NodeJS packages contain a file, usually in the project root, called package.json - this file holds various metadata relevant to the project generated by package managers such as npm, yarn, pnpm. !/usr/bin/env python3 -- coding: utf-8 -- """All NodeJS packages contain a file, usually in the...

FeiFeiCms - Local File Inclusion Detection

FeiFeiCms is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """FeiFeiCms is vulnerable to local file inclusion.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'FeiFeiCms - Local File...

Graphite Browser Login Panel - Detect

Graphite Browser login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Graphite Browser login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Graphite Browser Login Panel - Detect...

Star Micronics Network Utility Panel - Detect

Star Micronics Network Utility panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Star Micronics Network Utility panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Star Micronics Networ...

Selenium Grid Console - Detect

Selenium Grid Console panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Selenium Grid Console panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Selenium Grid Console - Detect',...

Flask Debug Toolbar - Exposure Detection

Detected Flask Debug Toolbar was exposed in production, potentially leaking sensitive application information, SQL queries, request data, and configuration details. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Flask Debug Toolbar was exposed in production, potentially leaking sensitive...

V2X Control - Dashboard Exposure Detection

V2X Control Dashboard is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """V2X Control Dashboard is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'V2X Control - Dashboard Exposure Detection',...

Android Debug Manager Detection

Android Debug Manger is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Android Debug Manger is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Android Debug Manager Detection', 'description': 'Android...

Vermeg Solife Panel - Detect

Vermeg Solife was detected - A life insurance solution with cash, tax, legal, and claims management to boost operational efficiency and ensure compliance. !/usr/bin/env python3 -- coding: utf-8 -- """Vermeg Solife was detected - A life insurance solution with cash, tax, legal, and claims manageme...

Khodrochi CMS - Cross Site Scripting Detection

A cross site scripting vulnerability was found in the Khodrochi.ir CMS an Iranian Car Services Platform. !/usr/bin/env python3 -- coding: utf-8 -- """A cross site scripting vulnerability was found in the Khodrochi.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

NoVus IP Login Panel - Detect

NoVus IP login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """NoVus IP login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'NoVus IP Login Panel - Detect', 'description': 'NoVus...

OA E-Office officeserver.php Arbitrary File Read Detection

There is an arbitrary file reading vulnerability in the OA E-Office officeserver.php file. An attacker can download any file on the server through the vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """There is an arbitrary file reading vulnerability in the OA E-Office officeserver."""...

CakePHP Default Page Detection

Detects CakePHP Default Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects CakePHP Default Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'CakePHP Default Page Detection', 'description': 'Detects CakePH...

4D Detection

4D technology was detected. !/usr/bin/env python3 -- coding: utf-8 -- """4D technology was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': '4D Detection', 'description': '4D technology was detected.',...

jfa-go Setup Page - Exposure Detection

Detects exposed jfa-go Setup page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed jfa-go Setup page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'jfa-go Setup Page - Exposure Detection', 'description...

Nginx version detect

Some nginx servers have the version on the response header. Useful when you need to find specific CVEs on your targets. !/usr/bin/env python3 -- coding: utf-8 -- """Some nginx servers have the version on the response header.""" import re from kittysploit import from lib.protocols.http.httpclient...

Akuiteo Login Panel - Detect

Akuiteo products was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Akuiteo products was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Akuiteo Login Panel - Detect', 'description': 'Akuiteo produc...

Live Helper Chat Admin Login Panel - Detect

Live Helper Chat admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Live Helper Chat admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Live Helper Chat Admin...

TurboCRM - Cross-Site Scripting Detection

TurboCRM contains a cross-site scripting vulnerability which allows a remote attacker to inject arbitrary JavaScript into the response returned by the application. !/usr/bin/env python3 -- coding: utf-8 -- """TurboCRM contains a cross-site scripting vulnerability which allows a remote attacker to...

Gnuboard 5 - Cross-Site Scripting Detection

Gnuboard 5 contains a cross-site scripting vulnerability via the cleanxsstags function called in new.php. !/usr/bin/env python3 -- coding: utf-8 -- """Gnuboard 5 contains a cross-site scripting vulnerability via the cleanxsstags function called in new.""" from kittysploit import from...

Zuul Panel - Detect

ZUUL panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ZUUL panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Zuul Panel - Detect', 'description': 'ZUUL panel was detected.', 'author'...

Caton Network Manager System Login Panel - Detect

Caton Network Manager System login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Caton Network Manager System login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Caton Network...

Grails Admin Console Panel - Detect

Grails Admin Console panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Grails Admin Console panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Grails Admin Console Panel - Detect',...

Veeam Backup Enterprise Manager Login - Detect

Veeam Backup Enterprise Manager Login !/usr/bin/env python3 -- coding: utf-8 -- """Veeam Backup Enterprise Manager Login.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Veeam Backup Enterprise Manager Login - Detect...

ClipBucket Installer - Exposure Detection

ClipBucket is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """ClipBucket is susceptible to the Installation page exposure due to misconfiguration.""" import re from kittysploit import from lib.protocols.http.httpclient import...

airCube Login - Detect

airCube login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """airCube login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'airCube Login - Detect', 'description': 'airCube login...

Asanhamayesh CMS 3.4.6 - Local File Inclusion Detection

Asanhamayesh CMS 3.4.6 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Asanhamayesh CMS 3.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Asanhamayesh CMS 3.4.6 - Local...

Tongda OA V2017 Video File - Arbitrary File Read Detection

There is an arbitrary file reading vulnerability in Extreme OA videofile.php. An attacker can obtain sensitive files on the server through the vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """There is an arbitrary file reading vulnerability in Extreme OA videofile.""" from kittysploit...

Dockerfile - Detect

Dockerfile was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Dockerfile was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dockerfile - Detect', 'description': 'Dockerfile was detected.'...