Tongda OA V2017 Video File - Arbitrary File Read Detection

There is an arbitrary file reading vulnerability in Extreme OA videofile.php. An attacker can obtain sensitive files on the server through the vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """There is an arbitrary file reading vulnerability in Extreme OA videofile.""" from kittysploit...

Dockerfile - Detect

Dockerfile was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Dockerfile was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dockerfile - Detect', 'description': 'Dockerfile was detected.'...

Bitrix Login Panel Detection

Bitrix24 is a unified work space that places a complete set of business tools into a single, intuitive interface. !/usr/bin/env python3 -- coding: utf-8 -- """Bitrix24 is a unified work space that places a complete set of business tools into a single, intuitive interfa.""" from kittysploit import...

Gnuboard CMS - Cross-Site Scripting Detection

Gnuboard CMS contains a cross-site scripting vulnerability which allows remote attackers to inject arbitrary JavaScript into the responses returned by the server. !/usr/bin/env python3 -- coding: utf-8 -- """Gnuboard CMS contains a cross-site scripting vulnerability which allows remote attackers ...

Barracuda SSL VPN Log In Detection

The Barracuda SSL VPN is an integrated hardware and software solution enabling secure, clientless remote access to internal network resources from any web browser. !/usr/bin/env python3 -- coding: utf-8 -- """The Barracuda SSL VPN is an integrated hardware and software solution enabling secure,...

OpenSCADA - Panel Detection

OpenSCADA is an open-source SCADA Supervisory Control and Data Acquisition system. Exposed instances may provide access to industrial control interfaces and operational technology OT data without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """OpenSCADA is an open-source SCADA...

GeoWebServer Detector Panel - Detect

GeoWebServer Detector panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """GeoWebServer Detector panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GeoWebServer Detector Panel - Detect',...

Python Setup Configuration - Exposure Detection

Python Setup Configuration "setup.py" File was exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Python Setup Configuration "setup.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Python Setup Configuration -...

Seeyon WooYun - Local File Inclusion Detection

Seeyon WooYun allows remote attackers to include the content of locally stored content and disclose it back to the attacker via local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Seeyon WooYun allows remote attackers to include the content of locally stored content and disclose it...

Microsoft Azure Default Page Detection

Detects Microsoft Azure Default Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Microsoft Azure Default Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Microsoft Azure Default Page Detection',...

XAMPP Environment Variables Exposure Detection

printenv.pl file is exposed in XAMPP leaking environment variables. !/usr/bin/env python3 -- coding: utf-8 -- """printenv.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'XAMPP Environment Variables Exposure...

WordPress Plugin Arforms Listing Detection

Searches for sensitive directories present in the arforms plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for sensitive directories present in the arforms plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Ellipsis Human Presence Technology <= 2.0.8 - Cross Site Scripting Detection

The 'page' GET parameter of the inc/protected-forms-table.php file was affected by a reflected XSS vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """The 'page' GET parameter of the inc/protected-forms-table.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Sharepoint List - Detect

Sharepoint list was detected because of improper configuration. An anonymous user can access SharePoint Web Services. !/usr/bin/env python3 -- coding: utf-8 -- """Sharepoint list was detected because of improper configuration.""" from kittysploit import from lib.protocols.http.httpclient import...

Sitecore CMS - Detect

Detect Sitecore Content Management System CMS websites based on a redirect from the sitecore media handler URL pattern to the notfound.aspx page. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Sitecore Content Management System CMS websites based on a redirect from the sitecore media handler...

Global Traffic Statistics Exposure Detection

Global Traffic Statistics page is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Global Traffic Statistics page is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Global Traffic Statistics Exposure...

PbootCMS 2.0.7 - SQL Injection Detection

PbootCMS 2.0.7 contains a SQL injection vulnerability via pbootcms.db. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. !/usr/bin/env python3 -- coding: utf-8 -- """PbootCMS...

Drupal Avatar Uploader - Cross-Site Scripting Detection

Drupal Avatar Uploader v7.x-1.0-beta8 plugin contains a cross-site scripting vulnerability in the slider import search feature and tab parameter via plugin settings. !/usr/bin/env python3 -- coding: utf-8 -- """Drupal Avatar Uploader v7.""" from kittysploit import from lib.protocols.http.httpclie...

ACEmanager Detection

ACEManager was detected. ACEManager is a configuration and diagnostic tool for the Sierra Wireless AirLink Raven modems. !/usr/bin/env python3 -- coding: utf-8 -- """ACEManager was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Caucho Resin LFR Detection

There is an input verification vulnerability in the implementation of a certain CGI program in Resin. A remote attacker may use this vulnerability to read any files in the home directory of the Web, including JSP source code or class files. !/usr/bin/env python3 -- coding: utf-8 -- """There is an...

XSS-Protection Header - Cross-Site Scripting Detection

Setting the XSS-Protection header is deprecated. Setting the header to anything other than 0 can actually introduce an XSS vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """Setting the XSS-Protection header is deprecated.""" import re from kittysploit import from...

RSA Self-Service Login Panel - Detect

RSA Self-Service login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """RSA Self-Service login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'RSA Self-Service Login Panel - Detect...

HPE OneView - Panel Detect

HPE OneView is an infrastructure management platform that provides automated management, monitoring, and updates for HPE servers, storage, and networking resources through a unified interface. !/usr/bin/env python3 -- coding: utf-8 -- """HPE OneView is an infrastructure management platform that...

Chatbot UI Panel - Detect

Chatbot UI is an open-source AI chat app !/usr/bin/env python3 -- coding: utf-8 -- """Chatbot UI is an open-source AI chat app.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Chatbot UI Panel - Detect', 'description...

OpenProject - Detect

OpenProject is an open source web-based project management software. !/usr/bin/env python3 -- coding: utf-8 -- """OpenProject is an open source web-based project management software.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Lantronix Web Manager Login Panel- Detect

Lantronix Web Manager login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Lantronix Web Manager login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Lantronix Web Manager Login...

Tableau Services Manager Login Panel - Detect

Tableau Services Manager login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Tableau Services Manager login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tableau Services...

SIP OPTIONS Detection

Sends a SIP OPTIONS request over TCP then UDP fallback to fingerprint PBX / VoIP endpoints on port 5060. !/usr/bin/env python3 -- coding: utf-8 -- """Detect SIP services via OPTIONS probe TCP then UDP.""" from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient from...

Panmicro E-Mobile System - Arbitrary File Read Detection

The Panmicro E-Mobile client/cdnfile interface has an arbitrary file reading vulnerability. Unauthenticated attackers can use this vulnerability to read important system files, database configuration files, and so on. !/usr/bin/env python3 -- coding: utf-8 -- """The Panmicro E-Mobile client/cdnfi...

PowerCom Network Manager Detection

Detects PowerCom Network Manager. !/usr/bin/env python3 -- coding: utf-8 -- """Detects PowerCom Network Manager.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PowerCom Network Manager Detection', 'description':...

Rhymix CMS Detect

Detects Rhymix CMS !/usr/bin/env python3 -- coding: utf-8 -- """Detects Rhymix CMS.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Rhymix CMS Detect', 'description': 'Detects Rhymix CMS', 'author': 'KittySploit Team...

FreeIPA Identity Management Login Panel - Detect

FreeIPA Identity Management login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """FreeIPA Identity Management login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'FreeIPA Identit...

Opengear Management Console Login Panel - Detect

The Opengear Management Console admin panel has been discovered. !/usr/bin/env python3 -- coding: utf-8 -- """The Opengear Management Console admin panel has been discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Axigen WebMail PanelDetection

An Axigen webmail panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """An Axigen webmail panel was discovered.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Axigen WebMail PanelDetection',...

Akamai CloudTest Panel Detection

An Akamai CloudTest panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """An Akamai CloudTest panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Akamai CloudTest Panel Detection',...

CPAS Management System - Arbitrary File Read Detection

The CPAS Audit Management System has been found to contain a vulnerability that allows arbitrary file read. This security flaw can be exploited by attackers to access sensitive files on the server, potentially exposing critical system information. The vulnerability can be triggered by sending a...

Craft CMS Installation Wizard Exposure Detection

Detected Craft CMS installation wizard was exposed, allowing attackers to complete the installation process and gain administrative access to the CMS. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Craft CMS installation wizard was exposed, allowing attackers to complete the installation...

Crontab UI - Dashboard Exposure Detection

Detects Crontab UI - Dashboard Exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Crontab UI - Dashboard Exposure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Crontab UI - Dashboard Exposure Detection...

Crystal Live HTTP Server 6.01 - Local File Inclusion Detection

Crystal Live HTTP Server 6.01 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Crystal Live HTTP Server 6.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Crystal Live HTTP Server...

HP iLO Serial Key - Detect

HP iLO serial key was detected. !/usr/bin/env python3 -- coding: utf-8 -- """HP iLO serial key was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HP iLO Serial Key - Detect', 'description': 'HP iLO serial...

Amatera Stealer C2 Panel - Detect

Amatera Stealer C2 Login Panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Amatera Stealer C2 Login Panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Amatera Stealer C2 Panel -...

Alibaba Anyproxy fetchBody File - Path Traversal Detection

Alibaba Anyproxy is vulnerable to Path Traversal. !/usr/bin/env python3 -- coding: utf-8 -- """Alibaba Anyproxy is vulnerable to Path Traversal.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Alibaba...

firebase detect

Detects firebase detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects firebase detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'firebase detect', 'description': 'Detects firebase detect.', 'author':...

Akeeba Backup Installer - Exposure Detection

Akeeba Backup is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Akeeba Backup is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import...

alfacgiapi Detection

Searches for sensitive directories present in the alfacgiapi plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for sensitive directories present in the alfacgiapi plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

cPanel API Codes Panel - Detect

cPanel API Codes panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """cPanel API Codes panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'cPanel API Codes Panel - Detect', 'description':...

Nuxtjs Config File - File Disclosure Detection

Nuxtjs Config file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Nuxtjs Config file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Nuxtjs Config File - File Disclosure Detection', 'description...

OpenDreambox FTP Service - Detect

OpenDreambox FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """OpenDreambox FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'OpenDreambox F...

Keycloak Admin Login Panel - Detect

Keycloak admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Keycloak admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Keycloak Admin Login Panel - Detect',...

Akamai Bot Manager Protection - Detect

Checks if the website is protected by Akamai Bot Manager !/usr/bin/env python3 -- coding: utf-8 -- """Checks if the website is protected by Akamai Bot Manager.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...