Spring Boot `X-Application-Context` Header Exposure Detection

Detected the presence of the X-Application-Context header in HTTP responses, which can expose sensitive application context information. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the presence of the X-Application-Context header in HTTP responses, which can expose sensitive applic."""...

SQL Buddy Login Panel - Detect

SQL Buddy login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SQL Buddy login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SQL Buddy Login Panel - Detect', 'description': 'SQ...

SQLite History - Exposure Detection

Detects exposed .sqlitehistory files. These files contain SQLite command history, including executed queries, table names, and potentially sensitive data that was queried or inserted. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed .""" import re from kittysploit import from...

SQL Monitor - Discovery Detection

SQL Monitor was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """SQL Monitor was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SQL Monitor - Discovery Detection', 'description': 'SQL Monitor was...

Detect Microsoft SQL Server Reporting

Detects Detect Microsoft SQL Server Reporting. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Detect Microsoft SQL Server Reporting.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect Microsoft SQL Server...

Squidex Headless CMS Panel - Detect

Squidex is an open source headless CMS and content management hub. !/usr/bin/env python3 -- coding: utf-8 -- """Squidex is an open source headless CMS and content management hub.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info ...

Squid End-of-Life - Detect

Detected Squid proxy versions that have reached End-of-Life EOL and no longer receive security updates. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Squid proxy versions that have reached End-of-Life EOL and no longer receive security updates.""" from kittysploit import from...

SquirrelMail Login Panel - Detect

SquirrelMail login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SquirrelMail login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SquirrelMail Login Panel - Detect',...

SquirrelMail 1.2.11 - Local File Inclusion Detection

SquirrelMail 1.2.11 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """SquirrelMail 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SquirrelMail 1.2.11 - Local File...

SSH Authorized Keys File - Detect

SSH authorized keys file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SSH authorized keys file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SSH Authorized Keys File - Detect',...

SSH Known Hosts File - Detect

SSH known hosts file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SSH known hosts file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SSH Known Hosts File - Detect', 'description': 'SSH...

CheckPoint SSL Network Extender Login Panel - Detect

CheckPoint SSL Network Extender login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """CheckPoint SSL Network Extender login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

StackStorm Web UI - Panel Detect

StackStorm Web UI interface was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """StackStorm Web UI interface was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'StackStorm Web UI - Panel Detect',...

SteVe Login Panel - Detect

SteVe login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SteVe login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SteVe Login Panel - Detect', 'description': 'SteVe login...

SteVe - Cross-Site Scripting Detection

SteVe contains a cross-site scripting vulnerability. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks. !/usr/bin/env python3 --...

Stormshield Network Security - Login Panel Detection

Stormshield Network Security SNS is a French network security appliance providing firewall, IPS, VPN, and web filtering capabilities. Its web management portal is frequently exposed on non-standard ports. !/usr/bin/env python3 -- coding: utf-8 -- """Stormshield Network Security SNS is a French...

Strapi Admin - Installer Detection

Strapi Admin Registration enabled was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Strapi Admin Registration enabled was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Strapi Admin - Installer...

Strapi CMS Documentation Login Panel - Detect

Strapi CMS Documentation login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Strapi CMS Documentation login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Strapi CMS...

Apache Struts - OGNL Console Detection

This development console allows the evaluation of OGNL expressions that could lead to Remote Command Execution !/usr/bin/env python3 -- coding: utf-8 -- """This development console allows the evaluation of OGNL expressions that could lead to Remote Command Execution.""" from kittysploit import fr...

Subrion CMS Web Installer - Exposure Detection

Subrion CMS Web Installer has been exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Subrion CMS Web Installer has been exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Subrion CMS Web Installer - Exposur...

SugarCRM Exposed Installation Detection

SugarCRM is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """SugarCRM is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

SUNGROW Logger1000 Panel - Detect

SUNGROW Solar Energy Inverter Monitoring Devices Logger1000 panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SUNGROW Solar Energy Inverter Monitoring Devices Logger1000 panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Svnserve Configuration File - Detect

Svnserve configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Svnserve configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Svnserve Configuration File - Detect',...

SVN wc.db File Exposure Detection

SVN wc.db file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """SVN wc.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SVN wc.db File Exposure Detection', 'description': 'SVN wc.db file is exposed.', 'author...

Syfadis Xperience Login Panel - Detect

Syfadis Xperience login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Syfadis Xperience login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Syfadis Xperience Login Panel -...

Symantec Data Loss Prevention Login Panel - Detect

Symantec Data Loss Prevention login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Symantec Data Loss Prevention login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Symantec Da...

Symantec Endpoint Protection Manager Login Panel - Detect

Symantec Endpoint Protection Manager login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Symantec Endpoint Protection Manager login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name'...

Symantec Identity Manager Management Console Detection

Management Console to administrate Symantec Identity Manager environment, authentication is sometimes disabled. !/usr/bin/env python3 -- coding: utf-8 -- """Management Console to administrate Symantec Identity Manager environment, authentication is sometimes disabled.""" from kittysploit import...

Symantec Messaging Gateway <=10.6.1 - Local File Inclusion Detection

Symantec Messaging Gateway 10.6.1 and prior are vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Symantec Messaging Gateway 10.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Symantec...

Symfony _fragment - Detect

Symfony servers support a "/fragment" command that allows clients to provide custom PHP commands and return the HTML output. !/usr/bin/env python3 -- coding: utf-8 -- """Symfony servers support a "/fragment" command that allows clients to provide custom PHP commands and return t.""" from...

Symfony Lock File - Exposure Detection

symfony.lock was found accessible, exposing a full list of installed Composer packages, library versions, and metadata for a Symfony-based PHP application. Disclosure of this file can provide insight into the application's attack surface, potentially revealing vulnerable or outdated dependencies...

Symfony properties.ini File Disclosure Detection

Detects Symfony properties.ini File Disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Symfony properties.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Symfony properties.ini File Disclosure...

Symfony Security Configuration File - Detect

Symfony security configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Symfony security configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Symfony Security...

SyncThru Web Service Panel - Detect

SyncThru Web Service panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SyncThru Web Service panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SyncThru Web Service Panel - Detect',...

Synopsys Coverity Panel Detection

Coverity® is a fast, accurate, and highly scalable static analysis SAST solution that helps development and security teams address security and quality defects early in the software development life cycle SDLC, track and manage risks across the application portfolio, and ensure compliance with...

Synway SMG Gateway 9-2radius.php - Remote Command Execution Detection

Synway SMG Gateway Management Software contains a remote command execution vulnerability in 9-2radius.php, where the radiusaddress parameter is passed to a system call without sanitization. This allows unauthenticated attackers to execute arbitrary commands on the server. !/usr/bin/env python3 --...

Tasmota Configuration Exposure Detection

Tasmota configuration is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Tasmota configuration is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tasmota Configuration Exposure Detection', 'description...

TastyIgniter Setup Page - Exposure Detection

Detects exposed TastyIgniter Setup page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed TastyIgniter Setup page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'TastyIgniter Setup Page - Exposure...

Tautulli Panel - Unauthenticated Access Detection

Detects Tautulli Panel - Unauthenticated Access. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Tautulli Panel - Unauthenticated Access.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tautulli Panel -...

Tekon - Unauthenticated Log Leak Detection

A vulnerability in Tekon allows remote unauthenticated users to disclose the Log of the remote device !/usr/bin/env python3 -- coding: utf-8 -- """A vulnerability in Tekon allows remote unauthenticated users to disclose the Log of the remote device.""" from kittysploit import from...

Teltonika Login Panel - Detect

Teltonika login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Teltonika login panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Teltonika Login Panel - Detect',...

Tenda 11n Wireless Router - Admin Panel Detection

The administrative panel for a Tenda Technology 11n Wireless Router was found. !/usr/bin/env python3 -- coding: utf-8 -- """The administrative panel for a Tenda Technology 11n Wireless Router was found.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Teradek Cube Administrative Console - Panel Detection

Detects Teradek Cube Administrative Console - Panel. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Teradek Cube Administrative Console - Panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Teradek Cube...

Thanos Prometheus Setup - Exposure Detection

Thanos graph endpoint was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Thanos graph endpoint was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Thanos Prometheus Setup - Exposure Detection',...

ThingsBoard Panel - Detect

ThingsBoard was detected — a Open-source IoT Platform for device management, data collection, processing and visualization. !/usr/bin/env python3 -- coding: utf-8 -- """ThingsBoard was detected — a Open-source IoT Platform for device management, data collection, processing and v.""" from...

Thinkific - Open Redirect Detection

Thinkific contains an open redirect vulnerability via the http://interact.sh URL. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """Thinkific contains an...

ThinkPHP 2/3 - Remote Code Execution Detection

ThinkPHP 2.x and 3.0 in Lite mode are susceptible to remote code execution via the s parameter. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. !/usr/bin/env python3 -- coding:...

ThinkPHP 5.0.1 - Remote Code Execution Detection

ThinkPHP 5.0.1 allows remote unauthenticated attackers to execute arbitrary code via the 's' parameter. !/usr/bin/env python3 -- coding: utf-8 -- """ThinkPHP 5.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ThinkPH...

ThinkPHP Errors - Sensitive Information Exposure Detection

ThinkPHP error is leaking sensitive info. !/usr/bin/env python3 -- coding: utf-8 -- """ThinkPHP error is leaking sensitive info.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ThinkPHP Errors - Sensitive Information...

TIBCO BusinessConnect - Detect

TIBCO BusinessConnect technology was detected. !/usr/bin/env python3 -- coding: utf-8 -- """TIBCO BusinessConnect technology was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'TIBCO BusinessConnect -...