Infoblox NIOS Login Panel - Detect

Infoblox NIOS login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Infoblox NIOS login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Infoblox NIOS Login Panel - Detect',...

Sambar FTP Service - Detect

The File Transfer Protocol FTP is a standard network protocol that transfers computer files between a client and server on a computer network. !/usr/bin/env python3 -- coding: utf-8 -- """The File Transfer Protocol FTP is a standard network protocol that transfers computer files between a...

Ivanti Sentry Panel - Detect

Ivanti Sentry panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ivanti Sentry panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ivanti Sentry Panel - Detect', 'description': 'Ivanti...

PocketBase Panel - Detect

PocketBase Login panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """PocketBase Login panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PocketBase Panel - Detect', 'description':...

NPM Anonymous CLI Metrics Json Detection

anonymous-cli-metrics.json internal file in NPM is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """anonymous-cli-metrics.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'NPM Anonymous CLI Metrics Json Detection...

ASP.NET Core Development Environment - Exposure Detection

The ASP.NET Core application is running in Development mode, which could exposes detailed error messages and stack traces on the '/Error' page. !/usr/bin/env python3 -- coding: utf-8 -- """The ASP.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner...

Wordpress DB Repair Exposed Detection

Discover enabled Wordpress repair page. !/usr/bin/env python3 -- coding: utf-8 -- """Discover enabled Wordpress repair page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Wordpress DB Repair Exposed Detection',...

nPerf Server - Detect

A nperf panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """A nperf panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'nPerf Server - Detect', 'description': 'A nperf panel was detected....

EspoCRM - Detect

EspoCRM panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """EspoCRM panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'EspoCRM - Detect', 'description': 'EspoCRM panel was detected.',...

Visual Studio Code jsconfig.json - Detect

Visual Studio Code jsconfig.json was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Visual Studio Code jsconfig.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Visual Studio Code jsconfig.json - Detect',...

Graphql PHP Detect

Detects Graphql PHP Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Graphql PHP Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Graphql PHP Detect', 'description': 'Detects Graphql PHP Detect.',...

Cisco Finger Daemon Detection

The finger daemon runs on TCP port 79. The client will in the case of remote hosts open a connection to port 79. !/usr/bin/env python3 -- coding: utf-8 -- """The finger daemon runs on TCP port 79.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import...

MikroTik FTP Service - Detect

MikroTik FTP server was detected. !/usr/bin/env python3 -- coding: utf-8 -- """MikroTik FTP server was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'MikroTik FTP Service -...

Totemomail SMTP Server Detection

Totemomail is a comprehensive email solution designed to address all aspects of digital communication security. !/usr/bin/env python3 -- coding: utf-8 -- """Totemomail is a comprehensive email solution designed to address all aspects of digital communication security.""" import socket from...

Cyber Stealer C2 Panel - Detect

Cyber Stealer C2 Login Panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Cyber Stealer C2 Login Panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cyber Stealer C2 Panel - Detect',...

AddPac GSM VoIP Gateway Panel - Detect

AddPac GSM VoIP Gateway panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """AddPac GSM VoIP Gateway panel was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'AddP...

WP Smushit - Full Path Disclosure Detection

Smushit WordPress plugin contains a full path disclosure vulnerability due to improper access restrictions in its source files, allowing unauthenticated attackers to retrieve full server paths and aiding exploitation. !/usr/bin/env python3 -- coding: utf-8 -- """Smushit WordPress plugin contains ...

FileGator Panel - Detect

Detects FileGator Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects FileGator Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'FileGator Panel - Detect', 'description': 'Detects...

FineReport 8.0 - Local File Inclusion Detection

FIneReport 8.0 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """FIneReport 8.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'FineReport 8.0 - Local File Inclusion Detection',...

Huawei Router - Authentication Bypass Detection

Huawei Routers are vulnerable to authentication bypass because the default password of this router is the last 8 characters of the device's serial number which exist on the back of the device. !/usr/bin/env python3 -- coding: utf-8 -- """Huawei Routers are vulnerable to authentication bypass...

Cisco UCS Manager KVM Login Panel - Detect

Cisco UCS Manager KVM login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Cisco UCS Manager KVM login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cisco UCS Manager KVM Login...

GMail API - Detect

GMail API was detected. !/usr/bin/env python3 -- coding: utf-8 -- """GMail API was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GMail API - Detect', 'description': 'GMail API was detected.', 'author':...

Hybris Management Console Login Panel - Detect

Hybris Management Console login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Hybris Management Console login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Hybris Management...

Graphql wpgraphql Detect

Detects Graphql wpgraphql Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Graphql wpgraphql Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Graphql wpgraphql Detect', 'description': 'Detects...

Confluence Installation Page - Exposure Detection

Confluence is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Confluence is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Bottle debug mode enabled Detection

Detects Bottle debug mode enabled. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Bottle debug mode enabled.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Bottle debug mode enabled Detection', 'description':...

FiftyOne Panel - Detect

FiftyOne, an open-source dataset visualization and curation tool for computer vision workflows built by Voxel51, was detected. The app ships with no authentication by default, so any exposed instance directly served browsable dataset content images, labels, metadata to unauthenticated visitors. T...

Tox Configuration File - Detect

Tox configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Tox configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tox Configuration File - Detect', 'description':...

Aptus Login - Panel Detect

Aptus login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Aptus login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Aptus Login - Panel Detect', 'description': 'Aptus login...

Netris Dashboard Panel - Detect

Netris Dashboard panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Netris Dashboard panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Netris Dashboard Panel - Detect', 'description':...

WordPress DB Backup Detection

This template checks for exposed database in wordpress. !/usr/bin/env python3 -- coding: utf-8 -- """This template checks for exposed database in wordpress.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WordPress D...

H3C Server - Unauthenticated Access Detection

H3C server was able to be accessed with no authentication requirements in place. !/usr/bin/env python3 -- coding: utf-8 -- """H3C server was able to be accessed with no authentication requirements in place.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Fortinet FortiAnalyzer - Login Panel Detection

Fortinet FortiAnalyzer is a centralised log management and analytics platform for Fortinet security devices. The web management console is commonly internet-exposed on ports 443, 10443, 9443, or 4443. !/usr/bin/env python3 -- coding: utf-8 -- """Fortinet FortiAnalyzer is a centralised log...

HedgeDoc Collaborative Editor - Detect

HedgeDoc is an open-source, collaborative markdown editor for teams to share and co-edit notes in real time. This template detects publicly reachable HedgeDoc instances by fingerprinting unique branding markers and the dedicated Hedgedoc-Version response header. !/usr/bin/env python3 -- coding:...

Laravel Login - Panel Detection

A Laravel login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """A Laravel login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Laravel Login - Panel Detection', 'description': 'A...

Hanta Internet Behavior Management System - Remote Code Execution Detection

Hanta Internet Behavior Management System is vulnerable to RCE. !/usr/bin/env python3 -- coding: utf-8 -- """Hanta Internet Behavior Management System is vulnerable to RCE.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

OWASP Juice Shop Detection

Detects OWASP Juice Shop. !/usr/bin/env python3 -- coding: utf-8 -- """Detects OWASP Juice Shop.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OWASP Juice Shop Detection', 'description': 'Detects OWASP Juice Shop.'...

WordPress 123ContactForm Plugin Directory Listing Detection

Searches for sensitive directories present in the 123contactform-for-wordpress plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for sensitive directories present in the 123contactform-for-wordpress plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclien...

WAMP Xdebug - Detect

WAMP Xdebug was detected. !/usr/bin/env python3 -- coding: utf-8 -- """WAMP Xdebug was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WAMP Xdebug - Detect', 'description': 'WAMP Xdebug was detected.',...

WordPress Download Shortcode 0.2.3 - Local File Inclusion Detection

WordPress Download Shortcode 0.2.3 is prone to a local file inclusion vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. Prior versions may also be affected...

WordPress Installer Log Detection

This file is generated during the installation process of wordpress and is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """This file is generated during the installation process of wordpress and is exposed.""" import re from kittysploit import from lib.protocols.http.httpclient import...

cPanel Mailman - Cross-Site Scripting Detection

cPanel Mailman listinfo reflects the mpidentity query parameter into the HTML response without proper output encoding, resulting in reflected cross-site scripting. !/usr/bin/env python3 -- coding: utf-8 -- """cPanel Mailman listinfo reflects the mpidentity query parameter into the HTML response...

Craft CMS - Log File Disclosure Detection

Detected exposed Craft CMS log files due to misconfiguration, allowing unauthenticated access to sensitive information including error messages, stack traces, database queries, and potentially credentials or session data. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed Craft CMS log...

QuickCMS Installation Wizard Detection

PMM is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """PMM is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Server Backup Manager SE Panel - Detect

Server Backup Manager SE login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Server Backup Manager SE login panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Server Back...

Publicly accessible NPM Log file Detection

NPM log file is exposed to external users. !/usr/bin/env python3 -- coding: utf-8 -- """NPM log file is exposed to external users.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Publicly accessible NPM Log file...

nopCommerce Installer - Detect

nopCommerce installer panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """nopCommerce installer panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'nopCommerce Installer - Detect',...

Vercel Config File - File Disclosure Detection

Vercel Config file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Vercel Config file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Vercel Config File - File Disclosure Detection', 'description...

Build Properties File Exposure Detection

Detects Build Properties File Exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Build Properties File Exposure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Build Properties File Exposure Detection',...

BGP Detection

The remote host is running BGP, a popular routing protocol. This indicates that the remote host is probably a network router. !/usr/bin/env python3 -- coding: utf-8 -- """The remote host is running BGP, a popular routing protocol.""" import socket from kittysploit import from...