Dataease - Default Login Detection

Dataease has a built-in account demo/dataease, and many developers forget to delete or change the account password. As a result, many Dataease can log in with this built-in account. !/usr/bin/env python3 -- coding: utf-8 -- """Dataease has a built-in account demo/dataease, and many developers...

Datagerry Panel - Detect

Datagerry panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Datagerry panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Datagerry Panel - Detect', 'description': 'Datagerry panel...

DeepStack AI Server Panel - Detect

DeepStack, an open-source, self-hosted computer-vision AI server that provides object, face, and scene detection APIs, commonly deployed alongside home-automation stacks such as Home Assistant and Frigate on port 5000, was detected. An exposed, unauthenticated DeepStack landing/activation page wa...

CakePHP Default Page Detection

Detects CakePHP Default Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects CakePHP Default Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'CakePHP Default Page Detection', 'description': 'Detects CakePH...

CentOs-WebPanel Test Page Detection

Detects CentOs-WebPanel Test Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects CentOs-WebPanel Test Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'CentOs-WebPanel Test Page Detection', 'description':...

Lucee Default Page Detection

Detects Lucee Default Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Lucee Default Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Lucee Default Page Detection', 'description': 'Detects Lucee Defaul...

Red Hat Enterprise Linux Test Page Detection

Detects Red Hat Enterprise Linux Test Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Red Hat Enterprise Linux Test Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Red Hat Enterprise Linux Test Page...

Deimos C2 - Detect

DeimosC2 is a post-exploitation Command & Control C2 tool that leverages multiple communication methods in order to control machines that have been compromised. DeimosC2 server and agents works on, and has been tested on, Windows, Darwin, and Linux.It is entirely written in Golang with a front en...

Detect Dell iDRAC9

The Integrated Dell Remote Access Controller iDRAC is designed for secure local and remote server management and helps IT administrators deploy, update and monitor Dell EMC PowerEdge servers. !/usr/bin/env python3 -- coding: utf-8 -- """The Integrated Dell Remote Access Controller iDRAC is design...

Dependency-Track Login - Panel Detection

Dependency Track login panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Dependency Track login panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dependency-Track Login - Panel...

desktop.ini exposure Detection

Detects desktop.ini exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects desktop.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'desktop.ini exposure Detection', 'description': 'Detects desktop.ini...

Django Detection

An instance running Django is detected by looking for specific HTTP headers, HTML tags, and known endpoints. !/usr/bin/env python3 -- coding: utf-8 -- """An instance running Django is detected by looking for specific HTTP headers, HTML tags, and known endpoints.""" from kittysploit import from...

Docker Registry Browser - Detect

Detected the presence of Docker Registry Browser technology based on known paths and characteristic content in the HTTP response. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the presence of Docker Registry Browser technology based on known paths and characteristic content in.""" from...

Doris Panel - Detect

Doris panel detection template. !/usr/bin/env python3 -- coding: utf-8 -- """Doris panel detection template.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Doris Panel - Detect', 'description': 'Doris panel detectio...

DQS Superadmin Login Panel - Detect

DQS Superadmin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """DQS Superadmin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'DQS Superadmin Login Panel - Detect',...

Drupal - Source Code Disclosure Detection

Detected exposed Drupal source code, backup files, and sensitive configurations, potentially disclosing database credentials and API keys. This exposure revealed internal system paths and critical site metadata, increasing the risk of full system compromise. !/usr/bin/env python3 -- coding: utf-8...

DSS Download - Local File Inclusion Detection

DSS Download is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """DSS Download is vulnerable to local file inclusion.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'DSS...

DzzOffice Login Panel - Detect

DzzOffice login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """DzzOffice login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'DzzOffice Login Panel - Detect', 'description':...

EAA Application Access System - Arbitary File Read Detection

There is an arbitrary file reading vulnerability in the VA virtual application platform of Tingzhi Technology, through which an attacker can obtain sensitive information in the server. !/usr/bin/env python3 -- coding: utf-8 -- """There is an arbitrary file reading vulnerability in the VA virtual...

EasyCVR User - Information Disclosure Detection

The EasyCVR Video Management Platform is vulnerable to user information leakage. This template checks for exposed user information through the endpoint /api/v1/userlist?pageindex=0&pagesize=10. !/usr/bin/env python3 -- coding: utf-8 -- """The EasyCVR Video Management Platform is vulnerable to use...

EC2 Instance Information Detection

EC2 Instance information is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """EC2 Instance information is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'EC2 Instance Information Detection', 'description...

Fanwei OA E-Office - Information Disclosure Detection

Fanwei E-Office mysqlconfig.ini file can be directly accessed, leaking database account password and other information. !/usr/bin/env python3 -- coding: utf-8 -- """Fanwei E-Office mysqlconfig.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Eagle For Apache Kakfa Login - Detect

EFAK is a visualization and management software that allows one to query, visualize, alert on, and explore their metrics wherever they were stored. !/usr/bin/env python3 -- coding: utf-8 -- """EFAK is a visualization and management software that allows one to query, visualize, alert on, and explo...

Mystic Stealer Panel - Detect

Mystic Stealer panel were detected. !/usr/bin/env python3 -- coding: utf-8 -- """Mystic Stealer panel were detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Mystic Stealer Panel - Detect', 'description':...

3CX Phone System Web Client Management Console - Panel Detect

3CX Phone System Web Client Management Console panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """3CX Phone System Web Client Management Console panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info ...

Nagios Login Panel - Detect

Nagios login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Nagios login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Nagios Login Panel - Detect', 'description': 'Nagios logi...

NatShell - Local File Inclusion Detection

NatShell is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """NatShell is vulnerable to local file inclusion.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'NatShell - Local...

Ncast HD Intelligent Recording - Arbitrary File Reading Detection

Ncast HD intelligent recording and broadcasting system has an arbitrary file reading vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """Ncast HD intelligent recording and broadcasting system has an arbitrary file reading vulnerability.""" import re from kittysploit import from...

Neocase HR Portal Login Panel - Detect

Neocase HR Portal login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Neocase HR Portal login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Neocase HR Portal Login Panel -...

Neobox Web Server Login Panel - Detect

Neobox Web Server login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Neobox Web Server login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Neobox Web Server Login Panel -...

Netgate pfSense Plus - Login Panel Detection

Netgate pfSense Plus firewall login panel detected. !/usr/bin/env python3 -- coding: utf-8 -- """Netgate pfSense Plus firewall login panel detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Netgate pfSense Plu...

Netgear WNR614 - Improper Authentication Detection

A vulnerability in the Netgear WNR614 router permits unauthorized individuals to bypass the authentication. When adding "%00currentsetting.htm" to the the requested url, it will be recognized as passing the authentication. !/usr/bin/env python3 -- coding: utf-8 -- """A vulnerability in the Netgea...

Netis E1+ V1.2.32533 - WiFi Password Disclosure Detection

A vulnerability in Netis allows remote unauthenticated users to disclose the WiFi password of the remote device. !/usr/bin/env python3 -- coding: utf-8 -- """A vulnerability in Netis allows remote unauthenticated users to disclose the WiFi password of the remote devic.""" from kittysploit import...

Netris Dashboard Panel - Detect

Netris Dashboard panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Netris Dashboard panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Netris Dashboard Panel - Detect', 'description':...

NetScaler Console - Panel Detection

NetScaler Console login panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """NetScaler Console login panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'NetScaler Console - Panel...

WordPress Newsletter Manager < 1.5 - Unauthenticated Open Redirect Detection

WordPress Newsletter Manager 1.5 is susceptible to an open redirect vulnerability. The plugin used base64 encoded user input in the appurl parameter without validation to redirect users using the header PHP function, leading to an open redirect issue. !/usr/bin/env python3 -- coding: utf-8 --...

Nginx End-of-Life - Detect

Detected Nginx versions that have reached End-of-Life EOL and no longer receive security updates. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Nginx versions that have reached End-of-Life EOL and no longer receive security updates.""" from kittysploit import from...

nginxWebUI ≤ 3.5.0 - Remote Command Execution Detection

There is a command execution vulnerability in the nginxWebUI backend. After logging in to the backend, the attacker can execute any command to obtain server permissions. !/usr/bin/env python3 -- coding: utf-8 -- """There is a command execution vulnerability in the nginxWebUI backend.""" import re...

NodeBB Web Installer Detection

NodeBB Web is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """NodeBB Web is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Nomad - Exposed Jobs Detection

Nomad jobs were discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Nomad jobs were discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Nomad - Exposed Jobs Detection', 'description': 'Nomad jobs were...

Nostromo Web Server Detection

Detected servers running the Nostromo web server by identifying the Server header in HTTP responses. !/usr/bin/env python3 -- coding: utf-8 -- """Detected servers running the Nostromo web server by identifying the Server header in HTTP responses.""" from kittysploit import from...

Notion Detect

Detects Notion Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Notion Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Notion Detect', 'description': 'Detects Notion Detect.', 'author': 'KittySplo...

NPM .npmignore File Disclosure Detection

Detected NPM .npmignore configuration file, potentially exposing excluded files and project structure information. !/usr/bin/env python3 -- coding: utf-8 -- """Detected NPM .""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

NTFY Web - Exposure Detection

Publicly exposed NTFY web interface allowing unauthorized publish or subscribe access. !/usr/bin/env python3 -- coding: utf-8 -- """Publicly exposed NTFY web interface allowing unauthorized publish or subscribe access.""" from kittysploit import from lib.protocols.http.httpclient import Httpclien...

Nuxtjs Config File - File Disclosure Detection

Nuxtjs Config file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Nuxtjs Config file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Nuxtjs Config File - File Disclosure Detection', 'description...

Arbitrary File Read in Dev Mode - Nuxt.js Detection

Vite is misconfigured within nuxt to permit any file to be retrieved from the file system. !/usr/bin/env python3 -- coding: utf-8 -- """Vite is misconfigured within nuxt to permit any file to be retrieved from the file system.""" import re from kittysploit import from lib.protocols.http.httpclien...

Octoprint 3D Printer Panel - Detect

Octoprint 3D Printer panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Octoprint 3D Printer panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Octoprint 3D Printer Panel - Detect',...

Odoo Website - Information Disclosure Detection

Detected exposure of the Odoo website info page, which discloses installed applications and extensions that could aid reconnaissance. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposure of the Odoo website info page, which discloses installed applications and extensions that co.""" fro...

One Identity Password Manager Detection

One Identity Password Manager is a secure password manager that gives enterprises control over password management, policies, and automated reset functions. !/usr/bin/env python3 -- coding: utf-8 -- """One Identity Password Manager is a secure password manager that gives enterprises control over...

Ollama LLM Panel - Detect

Ollama LLM Panel was detected !/usr/bin/env python3 -- coding: utf-8 -- """Ollama LLM Panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ollama LLM Panel - Detect', 'description': 'Ollama LLM Panel w...