Oracle Reports Services - Servlet Detection

Oracle Reports Services - Servlet Command dashboard !/usr/bin/env python3 -- coding: utf-8 -- """Oracle Reports Services - Servlet Command dashboard.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Oracle Reports...

OSNEXUS QuantaStor Manager Panel - Detect

OSNEXUS QuantaStor Manager login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """OSNEXUS QuantaStor Manager login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OSNEXUS QuantaSto...

phpunit.xml File Disclosure Detection

Phpunit.xml was created by Romain Bourdon for the development of WampServer 3.1. Phpunit.xml is packaged with WampServer 3.1.9 and XAMPP 5.6.40. !/usr/bin/env python3 -- coding: utf-8 -- """Phpunit.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanne...

PostHog Browser RUM - Detect

Detects PostHog Product Analytics & RUM Real User Monitoring SDK artifacts in HTML responses. !/usr/bin/env python3 -- coding: utf-8 -- """Detects PostHog Product Analytics & RUM Real User Monitoring SDK artifacts in HTML responses.""" import re from kittysploit import from...

PostgREST API Server - Exposure Detection

PostgREST API Server was detected and appeared to be accessible without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """PostgREST API Server was detected and appeared to be accessible without authentication.""" from kittysploit import from lib.protocols.http.httpclient import...

Pritunl - Installation Detection

Pritunl is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Pritunl is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

QloApps - Installation Detection

QloApps Installation Assistant panel exposure. !/usr/bin/env python3 -- coding: utf-8 -- """QloApps Installation Assistant panel exposure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'QloApps - Installation...

QVidium Management System Exposed Detection

QVidium Management System is Exposed. !/usr/bin/env python3 -- coding: utf-8 -- """QVidium Management System is Exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'QVidium Management System Exposed Detection',...

DataEase < 2.10.10 - JWT Authentication Bypass Detection

DataEase 2.10.10 contains a broken authentication caused by ineffective secret verification, letting users forge JWT tokens, exploit requires no special privileges. !/usr/bin/env python3 -- coding: utf-8 -- """DataEase 2.""" from kittysploit import from lib.protocols.http.httpclient import...

OneUptime < 10.0.21 - Path Traversal Detection

OneUptime 10.0.21 contains a path traversal caused by unsanitized componentName parameter in /workflow/docs/:componentName endpoint, letting unauthenticated attackers read arbitrary files from the server filesystem. !/usr/bin/env python3 -- coding: utf-8 -- """OneUptime 10.""" import re from...

Dashy Panel - Detect

Detects Dashy Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Dashy Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dashy Panel - Detect', 'description': 'Detects Dashy Panel -...

Deadbolt Ransomware Detection

Detects Deadbolt Ransomware Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Deadbolt Ransomware Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Deadbolt Ransomware Detection', 'description'...

Fastcgi Default Test Page Detection

Detects Fastcgi Default Test Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Fastcgi Default Test Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Fastcgi Default Test Page Detection', 'description':...

DPLUS Dashboard Panel - Detect

DPLUS Dashboard panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """DPLUS Dashboard panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'DPLUS Dashboard Panel - Detect', 'description':...

draw.io Flowchart Maker Panel - Detect

draw.io Flowchart Maker panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """draw.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'draw.io Flowchart Maker Panel - Detect', 'description': 'draw.io Flowchar...

Drupal JSON:API Username Listing - Detect

Drupal JSON:API username listing was detected via the /user/user endpoint. !/usr/bin/env python3 -- coding: utf-8 -- """Drupal JSON:API username listing was detected via the /user/user endpoint.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Drupal User Enumration [Ajax] Detection

Detects Drupal User Enumration Ajax. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Drupal User Enumration Ajax.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Drupal User Enumration Ajax Detection',...

DUFS - Detect

DUFS software was detected. !/usr/bin/env python3 -- coding: utf-8 -- """DUFS software was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'DUFS - Detect', 'description': 'DUFS software was detected.',...

Elastic Kibana Config - File Disclosure Detection

Elastic Kibana Config file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Elastic Kibana Config file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Elastic Kibana Config - File Disclosure...

Server Monitor Installer Detection

Server Monitor is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Server Monitor is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import...

Slocum Fleet Mission Control Login Panel - Detect

Slocum Fleet Mission Control login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Slocum Fleet Mission Control login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Slocum Fleet...

SMF Installer Detection

SMF is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """SMF is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Softneta MedDream PACS Server Premium 6.7.1.1 - Local File Inclusion Detection

Softneta MedDream PACS Server Premium 6.7.1.1 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Softneta MedDream PACS Server Premium 6.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name'...

Surreal ToDo 0.6.1.2 - Local File Inclusion Detection

Surreal ToDo 0.6.1.2 is vulnerable to local file inclusion via index.php and the content parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Surreal ToDo 0.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name'...

Symfony FOSJsRoutingBundle Detection

Detects Symfony FOSJsRoutingBundle. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Symfony FOSJsRoutingBundle.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Symfony FOSJsRoutingBundle Detection', 'description...

Selea Targa IP OCR-ANPR Camera - Local File Inclusion Detection

Selea Targa IP OCR-ANPR camera suffers from an unauthenticated local file inclusion vulnerability because input passed through the Download Archive in Storage page using getfile.php script is not properly verified before being used to download files. This can be exploited to disclose the contents...

Tectuus SCADA Monitor Panel - Detect

Tectuus SCADA Monitor panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Tectuus SCADA Monitor panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tectuus SCADA Monitor Panel - Detect',...

Terramaster Login Panel - Detect

Terramaster login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Terramaster login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Terramaster Login Panel - Detect', 'description...

PQube 3 Power Analyzers Detection

PQube 3 Power Analyzer panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """PQube 3 Power Analyzer panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PQube 3 Power Analyzers Detection',...

Prefect - Detect

Detected Prefect, a modern workflow orchestration platform with Orion UI for managing data pipelines. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Prefect, a modern workflow orchestration platform with Orion UI for managing data pipelines.""" from kittysploit import from...

Exposed Prometheus Detection

Prometheus instance is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Prometheus instance is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Exposed Prometheus Detection', 'description': 'Prometheus...

RabbitMQ Exporter Detection

RabbitMQ Exporter is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """RabbitMQ Exporter is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'RabbitMQ Exporter Detection', 'description': 'RabbitMQ Exporter...

LDAP Account Manager Login Panel - Detect

LDAP Account Manager login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """LDAP Account Manager login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LDAP Account Manager Login...

LibreChat Login Panel - Detection

Detected LibreChat login panel. LibreChat is an open-source, self-hosted AI chat interface. !/usr/bin/env python3 -- coding: utf-8 -- """Detected LibreChat login panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Linksys Smart Wi-Fi Login Panel - Detect

Linksys Smart Wi-Fi login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Linksys Smart Wi-Fi login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Linksys Smart Wi-Fi Login Panel...

Log4j Properties - File Disclosure Detection

Log4j Properties file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Log4j Properties file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Log4j Properties - File Disclosure Detection',...

Looker Login Panel - Detect

Looker login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Looker login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Looker Login Panel - Detect', 'description': 'Looker logi...

Loxone WebInterface Panel - Detect

Detects Loxone WebInterface Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Loxone WebInterface Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Loxone WebInterface Panel - Detect'...

Missing Cookie SameSite Strict Detection

Identified cookies that lacked the samesite=strict attribute, which prevented enforcement of restrictions on cross-domain cookie transmission. !/usr/bin/env python3 -- coding: utf-8 -- """Identified cookies that lacked the samesite=strict attribute, which prevented enforcement of restrictions on...

Mitel MiCollab Login Panel - Detect

Mitel MiCollab login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Mitel MiCollab login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Mitel MiCollab Login Panel - Detect',...

MobileIron Sentry Panel - Detect

MobileIron Sentry panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """MobileIron Sentry panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MobileIron Sentry Panel - Detect', 'description...

Webp Server Go - Path Traversal Detection

Webp Server Go has an Path Traversal vulnerability. Attackers can use the vulnerability to access arbitraty file. !/usr/bin/env python3 -- coding: utf-8 -- """Webp Server Go has an Path Traversal vulnerability.""" import re from kittysploit import from lib.protocols.http.httpclient import...

Ambassador Edge Stack - Detect

Ambassador Edge Stack is a Kubernetes-native API Gateway that delivers the scalability, security, and simplicity for some of the world's largest Kubernetes installations. !/usr/bin/env python3 -- coding: utf-8 -- """Ambassador Edge Stack is a Kubernetes-native API Gateway that delivers the...

Apache Apollo Panel - Detect

Detects Apache Apollo Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Apache Apollo Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Apollo Panel - Detect', 'description':...

ArcGIS - Detect

ArcGIS products was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ArcGIS products was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ArcGIS - Detect', 'description': 'ArcGIS products was detected....

ArcServe Panel - Detect

Detects ArcServe Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects ArcServe Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ArcServe Panel - Detect', 'description': 'Detects ArcServ...

ASP-Nuke - Open Redirect Detection

ASP-Nuke contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """ASP-Nuke contains an open redirect vulnerability."""...

Atlantis Panel - Detect

Atlantis panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Atlantis panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Atlantis Panel - Detect', 'description': 'Atlantis panel was...

Bullwark Momentum Series JAWS 1.0 - Local File Inclusion Detection

Bullwark Momentum Series JAWS 1.0 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Bullwark Momentum Series JAWS 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Bullwar...

CAREL Pl@ntVisor Panel Detection

Carel plantvisor panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Carel plantvisor panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'CAREL Pl@ntVisor Panel Detection', 'description':...