nginxWebUI ≤ 3.5.0 - Remote Command Execution Detection

There is a command execution vulnerability in the nginxWebUI backend. After logging in to the backend, the attacker can execute any command to obtain server permissions. !/usr/bin/env python3 -- coding: utf-8 -- """There is a command execution vulnerability in the nginxWebUI backend.""" import re...

NodeBB Web Installer Detection

NodeBB Web is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """NodeBB Web is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Nomad - Exposed Jobs Detection

Nomad jobs were discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Nomad jobs were discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Nomad - Exposed Jobs Detection', 'description': 'Nomad jobs were...

Nostromo Web Server Detection

Detected servers running the Nostromo web server by identifying the Server header in HTTP responses. !/usr/bin/env python3 -- coding: utf-8 -- """Detected servers running the Nostromo web server by identifying the Server header in HTTP responses.""" from kittysploit import from...

Notion Detect

Detects Notion Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Notion Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Notion Detect', 'description': 'Detects Notion Detect.', 'author': 'KittySplo...

NPM .npmignore File Disclosure Detection

Detected NPM .npmignore configuration file, potentially exposing excluded files and project structure information. !/usr/bin/env python3 -- coding: utf-8 -- """Detected NPM .""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

NSQ Admin Panel - Detect

NSQ admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """NSQ admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'NSQ Admin Panel - Detect', 'description': 'NSQ admin panel was...

NTFY Web - Exposure Detection

Publicly exposed NTFY web interface allowing unauthorized publish or subscribe access. !/usr/bin/env python3 -- coding: utf-8 -- """Publicly exposed NTFY web interface allowing unauthorized publish or subscribe access.""" from kittysploit import from lib.protocols.http.httpclient import Httpclien...

Nuxtjs Config File - File Disclosure Detection

Nuxtjs Config file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Nuxtjs Config file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Nuxtjs Config File - File Disclosure Detection', 'description...

Arbitrary File Read in Dev Mode - Nuxt.js Detection

Vite is misconfigured within nuxt to permit any file to be retrieved from the file system. !/usr/bin/env python3 -- coding: utf-8 -- """Vite is misconfigured within nuxt to permit any file to be retrieved from the file system.""" import re from kittysploit import from lib.protocols.http.httpclien...

Octoprint 3D Printer Panel - Detect

Octoprint 3D Printer panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Octoprint 3D Printer panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Octoprint 3D Printer Panel - Detect',...

Odoo Website - Information Disclosure Detection

Detected exposure of the Odoo website info page, which discloses installed applications and extensions that could aid reconnaissance. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposure of the Odoo website info page, which discloses installed applications and extensions that co.""" fro...

One Identity Password Manager Detection

One Identity Password Manager is a secure password manager that gives enterprises control over password management, policies, and automated reset functions. !/usr/bin/env python3 -- coding: utf-8 -- """One Identity Password Manager is a secure password manager that gives enterprises control over...

Ollama LLM Panel - Detect

Ollama LLM Panel was detected !/usr/bin/env python3 -- coding: utf-8 -- """Ollama LLM Panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ollama LLM Panel - Detect', 'description': 'Ollama LLM Panel w...

Omnia MPX Node Login Panel - Detect

Omnia MPX Node login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Omnia MPX Node login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Omnia MPX Node Login Panel - Detect',...

OneDev Panel - Detect

OneDev is a Git Server with CI/CD, Kanban, and Packages. !/usr/bin/env python3 -- coding: utf-8 -- """OneDev is a Git Server with CI/CD, Kanban, and Packages.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OneDev...

OnlyOffice Wizard Page - Exposure Detection

Detects exposed OnlyOffice Setup page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed OnlyOffice Setup page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OnlyOffice Wizard Page - Exposure Detection',...

OpenBMCS 2.4 - Information Disclosure Detection

OpenBMCS 2.4 contains an information disclosure vulnerability. The application allows directory listing and exposure of some sensitive files, which can allow an attacker to leverage the disclosed information and gain full access. !/usr/bin/env python3 -- coding: utf-8 -- """OpenBMCS 2.""" from...

OpenCTI 3.3.1 - Local File Inclusion Detection

OpenCTI 3.3.1 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """OpenCTI 3.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OpenCTI 3.3.1 - Local File Inclusion Detection',...

Openfire Admin Console Login Panel - Detect

Openfire Admin Console login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Openfire Admin Console login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Openfire Admin Console...

OpenObserve Login Panel - Detect

OpenObserve products was detected. !/usr/bin/env python3 -- coding: utf-8 -- """OpenObserve products was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OpenObserve Login Panel - Detect', 'description':...

OpenSCADA - Panel Detection

OpenSCADA is an open-source SCADA Supervisory Control and Data Acquisition system. Exposed instances may provide access to industrial control interfaces and operational technology OT data without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """OpenSCADA is an open-source SCADA...

OpenSearch Dashboard Panel - Detect

OpenSearch Dashboard is a visualization and management tool for OpenSearch. This template detects the presence of the OpenSearch Dashboard login panel, which is the default authentication interface for accessing the dashboard. !/usr/bin/env python3 -- coding: utf-8 -- """OpenSearch Dashboard is a...

OpenSIS Login Panel - Detect

OpenSIS login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """OpenSIS login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OpenSIS Login Panel - Detect', 'description': 'OpenSIS...

openSIS 5.1 - Local File Inclusion Detection

openSIS 5.1 is vulnerable to local file inclusion and allows attackers to obtain potentially sensitive information by executing arbitrary local scripts in the context of the web server process. This may allow the attacker to compromise the application and computer; other attacks are also possible...

Openstack - Infomation Disclosure Detection

Openstack exposing Configuration or settings related to the Swift object storage system. !/usr/bin/env python3 -- coding: utf-8 -- """Openstack exposing Configuration or settings related to the Swift object storage system.""" from kittysploit import from lib.protocols.http.httpclient import...

OpenStack User Secrets Exposure Detection

Internal usersecrets.yml file is exposed in OpenStack. !/usr/bin/env python3 -- coding: utf-8 -- """Internal usersecrets.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OpenStack User Secrets Exposure Detection',...

OpenText Filr - Guest Access Enabled Detection

OpenText Filr formerly Micro Focus/Novell Filr had guest access enabled, allowing unauthenticated users to access the system as a Guest, exposing GuestUser: 'true' and an "Enter as Guest" option on the SSF login page. !/usr/bin/env python3 -- coding: utf-8 -- """OpenText Filr formerly Micro...

Open Web Analytics Login - Detect

Detects the presence of Open Web Analytics login page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of Open Web Analytics login page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Open Web...

Oqtane CMS Database - Detect

Detect which database distribution the target oqtane cms use. !/usr/bin/env python3 -- coding: utf-8 -- """Detect which database distribution the target oqtane cms use.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Oracle Enterprise Manager Login Panel - Detect

Oracle Enterprise Manager login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Oracle Enterprise Manager login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Oracle Enterprise...

Oracle HTTPServer12c Detection

Detects Oracle HTTPServer12c. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Oracle HTTPServer12c.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Oracle HTTPServer12c Detection', 'description': 'Detects Oracle...

Oracle WebCenter Sites Detection

Detects Oracle WebCenter Sites. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Oracle WebCenter Sites.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Oracle WebCenter Sites Detection', 'description': 'Detects...

Orbeon Forms Exposure Detection

Detects exposed Orbeon Forms interfaces including Form Runner, Form Builder, and Quick Links. Orbeon Forms is a web forms solution that may expose sensitive form data and administrative interfaces if not properly secured. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed Orbeon Forms...

OrbiTeam BSCW Server - Local File Inclusion Detection

OrbiTeam BSCW Server versions 5.0.x, 5.1.x, 5.2.4 and below, 7.3.x and below, and 7.4.3 and below are vulnerable to unauthenticated local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """OrbiTeam BSCW Server versions 5.""" import re from kittysploit import from...

OWASP Juice Shop Detection

Detects OWASP Juice Shop. !/usr/bin/env python3 -- coding: utf-8 -- """Detects OWASP Juice Shop.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OWASP Juice Shop Detection', 'description': 'Detects OWASP Juice Shop.'...

PACSOne Server 6.6.2 - Local File Inclusion Detection

PACSOne Server 6.6.2 is vulnerable to local file inclusion via its integrated DICOM Web Viewer. !/usr/bin/env python3 -- coding: utf-8 -- """PACSOne Server 6.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Pagekit Installer Exposure Detection

Pagekit is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Pagekit is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

PAHTool Login Panel - Detect

PAHTool login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """PAHTool login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PAHTool Login Panel - Detect', 'description': 'PAHTool...

PAN-OS Management Panel - Detect

PAN-OS management panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """PAN-OS management panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PAN-OS Management Panel - Detect', 'description...

Parse Dashboard Login Panel - Detect

Parse Dashboard login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Parse Dashboard login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Parse Dashboard Login Panel - Detect',...

Payroll Management System Web Login Panel - Detect

Payroll Management System Web login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Payroll Management System Web login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Payroll...

PDI Intellifuel - Device Page Detection

Detects PDI Intellifuel - Device Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects PDI Intellifuel - Device Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PDI Intellifuel - Device Page Detection',...

perfSONAR Toolkit - Exposure Detection

perfSONAR Toolkit is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """perfSONAR Toolkit is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'perfSONAR Toolkit - Exposure Detection', 'description':...

pfSense Login Panel - Detect

pfSense login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """pfSense login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'pfSense Login Panel - Detect', 'description': 'pfSense...

Phinx Configuration Exposure Detection

Phinx configuration file was exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Phinx configuration file was exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Phinx Configuration Exposure Detection',...

PhpGedView Installer Exposure Detection

PhpGedView is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """PhpGedView is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

phpMiniAdmin Login Panel - Detect

phpMiniAdmin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """phpMiniAdmin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'phpMiniAdmin Login Panel - Detect',...

phpMyFAQ Installation - Exposure Detection

phpMyFAQ installation is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """phpMyFAQ installation is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'phpMyFAQ Installation - Exposure Detection',...

PHPStan Configuration Page - Detect

PHPStan configuration page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """PHPStan configuration page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PHPStan Configuration Page - Detect',...