PHP Detect

Detects PHP Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects PHP Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PHP Detect', 'description': 'Detects PHP Detect.', 'author': 'KittySploit Team',...

Php.ini File Disclosure Detection

php.ini file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """php.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Php.ini File Disclosure Detection', 'description': 'php.ini file is exposed.', 'author':...

Pinata API Key - Expose Detection

Detects Pinata API Key - Expose. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Pinata API Key - Expose.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pinata API Key - Expose Detection', 'description': 'Detec...

Piwik Installer Exposure Detection

Piwik is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Piwik is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Piwik/Matomo - Unauthenticated Access Detection

Detected Piwik/Matomo instances exposing analytics data without authentication. When anonymous access was enabled, the API returned visitor statistics, page views, and other sensitive analytics data using the anonymous token. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Piwik/Matomo...

Well-Known PKI Validation Directory Detection

Detects CA/B Forum PKI validation artefacts directory. !/usr/bin/env python3 -- coding: utf-8 -- """Detects CA/B Forum PKI validation artefacts directory.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Well-Known PK...

Unity Plastic SCM Login Panel - Detect

Unity Plastic SCM login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Unity Plastic SCM login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Unity Plastic SCM Login Panel -...

PNPM Lock Yaml File Disclosure Detection

The pnpm-lock.yaml file is similar to the package-lock.json file used by npm or the yarn.lock file used by Yarn. It serves as a lock file that ensures consistent and reproducible installations of dependencies across different environments. !/usr/bin/env python3 -- coding: utf-8 -- """The...

Polarion Siemens Login - Panel Detection

Detects the exposed Polarion Siemens login page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the exposed Polarion Siemens login page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Polarion Siemens Login -...

Polycom Admin Panel - Detect

Polycom admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Polycom admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Polycom Admin Panel - Detect', 'description': 'Polycom...

Portainer - Init Deploy Discovery Detection

Portainer initialization deployment files were discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Portainer initialization deployment files were discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

PostgreSQL Cluster - Configuration Detection

PostgreSQL Cluster Configuration Page was detected and appeared to be accessible without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """PostgreSQL Cluster Configuration Page was detected and appeared to be accessible without authentication.""" from kittysploit import from...

Pritunl - Panel Detection

Realtime website and application monitoring tool !/usr/bin/env python3 -- coding: utf-8 -- """Realtime website and application monitoring tool.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pritunl - Panel...

PrivateBin - Detect

PrivateBin was detected. !/usr/bin/env python3 -- coding: utf-8 -- """PrivateBin was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PrivateBin - Detect', 'description': 'PrivateBin was detected.', 'author'...

ProcessWire Login - Panel Detect

ProcessWire login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ProcessWire login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ProcessWire Login - Panel Detect', 'description...

ProFTPD Configuration File - Detect

ProFTPD configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ProFTPD configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ProFTPD Configuration File - Detect',...

ProjectSend Login Panel - Detect

ProjectSend login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ProjectSend login panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ProjectSend Login Panel - Detect',...

Prometheus flags API endpoint Detection

The flags endpoint provides a full path to the configuration file. If the file is stored in the home directory, it may leak a username. !/usr/bin/env python3 -- coding: utf-8 -- """The flags endpoint provides a full path to the configuration file.""" from kittysploit import from...

Proofpoint Protection Server Panel - Detect

Proofpoint Protection Server panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Proofpoint Protection Server panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Proofpoint Protection...

Web Proxy Auto-Discovery Configuration File - Detect

Web Proxy Auto-Discovery configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Web Proxy Auto-Discovery configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Web Pro...

Pubspec YAML Configuration File - Detect

Pubspec YAML configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Pubspec YAML configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pubspec YAML Configuration File...

Pulsar360 Admin Panel - Detect

Pulsar360 admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Pulsar360 admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pulsar360 Admin Panel - Detect', 'description':...

Pulsar Admin UI Panel - Detect

Pulsar admin UI panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Pulsar admin UI panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pulsar Admin UI Panel - Detect', 'description':...

PyLoad Login - Panel Detection

A Pyload Login was detected. !/usr/bin/env python3 -- coding: utf-8 -- """A Pyload Login was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PyLoad Login - Panel Detection', 'description': 'A Pyload Login w...

pyproject.toml Configuration - Detect

pyproject.toml configuration was detected. !/usr/bin/env python3 -- coding: utf-8 -- """pyproject.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'pyproject.toml Configuration - Detect', 'description': 'pyproject.tom...

Detect Python Exposed Metrics

Information Disclosure of Garbage Collection !/usr/bin/env python3 -- coding: utf-8 -- """Information Disclosure of Garbage Collection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect Python Exposed Metrics',...

Joomla Solidres 2.13.3 - Cross-Site Scripting Detection

Joomla extension for Solidres - Online Booking System & Reservation Software is vulnerable to XSS in GET parameter 'show'. !/usr/bin/env python3 -- coding: utf-8 -- """Joomla extension for Solidres - Online Booking System & Reservation Software is vulnerable to XSS in GET param.""" from kittysplo...

Joplin Server Login - Panel Detection

Joplin Server login panel detected. !/usr/bin/env python3 -- coding: utf-8 -- """Joplin Server login panel detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Joplin Server Login - Panel Detection',...

jotty·page Login - Panel Detect

jotty·page login interface was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """jotty·page login interface was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'jotty·page Login - Panel Detect',...

JshERP Boot Panel - Detect

Detects JshERP Boot Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects JshERP Boot Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'JshERP Boot Panel - Detect', 'description': 'Detect...

Jupyter Lab - Unauthenticated Access Detection

JupyterLab was able to be accessed without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """JupyterLab was able to be accessed without authentication.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Jupyt...

Jupyter Notebook - Remote Command Execution Detection

Jupyter Notebook is an interactive Notebook, computer application is a web based visualization, Jupyter Notebook API/terminals path there are loopholes in the remote command execution. !/usr/bin/env python3 -- coding: utf-8 -- """Jupyter Notebook is an interactive Notebook, computer application i...

JSON Web Key File - Exposure Detection

Searches for JSON Web Key JWK file. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for JSON Web Key JWK file.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'JSON Web Key File - Exposure Detection',...

KACE Systems Management Appliance - Installer Detection

The exposure of the KACE Systems Management Appliance’s installer interface through the /common/setup.php endpoint allowed unauthorized access to the system setup wizard. This interface was publicly accessible when it should have been restricted, potentially granting attackers the ability to...

Apache Kafka Topics Panel - Detect

Apache Kafka Topics panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Kafka Topics panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Kafka Topics Panel - Detect',...

Kentico Login Panel - Detect

Kentico login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Kentico login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kentico Login Panel - Detect', 'description': 'Kentico...

Keycloak OpenID Configuration - Detect

Keycloak Openid configuration information was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Keycloak Openid configuration information was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Keycloak...

Kingdee OA Yunxingkong kdsvc - Remote Code Execution Detection

Kingdee OA Yunxingkong has a remote command execution vulnerability. This vulnerability is caused by the fact that the communication layer of Kingdee Cloud Starry Sky Management Center adopts binary data format by default, which requires serialization and deserialization. No signature or...

Kiwi TCMS Information Disclosure Detection

Internal info exposed in Kiwi TCMS. !/usr/bin/env python3 -- coding: utf-8 -- """Internal info exposed in Kiwi TCMS.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kiwi TCMS Information Disclosure Detection',...

Konga Panel - Detect

Konga panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Konga panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Konga Panel - Detect', 'description': 'Konga panel was detected.',...

Kopano WebApp Login Panel - Detect

Kopano WebApp login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Kopano WebApp login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kopano WebApp Login Panel - Detect',...

Kronos Workforce Central Login Panel - Detect

Kronos Workforce Central login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Kronos Workforce Central login panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kronos...

Kubelet Metrics Detection

Kube Metrics Server was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Kube Metrics Server was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kubelet Metrics Detection', 'description': 'Kube Metric...

Kubelet Scan Detection

Scans for kubelet pods !/usr/bin/env python3 -- coding: utf-8 -- """Scans for kubelet pods.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kubelet Scan Detection', 'description': 'Scans for kubelet pods', 'author':...

Kube API Deployments Detection

Scans for kube deployments !/usr/bin/env python3 -- coding: utf-8 -- """Scans for kube deployments.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kube API Deployments Detection', 'description': 'Scans for kube...

Kyan Credential - Exposure Detection

Kyan Network login panel was detected. Password and other credential theft is possible via accessing this panel. !/usr/bin/env python3 -- coding: utf-8 -- """Kyan Network login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Langtrace Panel - Detect

Langtrace, an open-source, OpenTelemetry-based observability platform for LLM applications that provides tracing, monitoring, and analytics for LLM, vector database, and framework calls, was detected. An exposed, self-hosted Langtrace dashboard instance was identified, which typically redirected...

Laravel Debug Info Leak Detection

This template can be used to detect a Laravel debug information leak by making a POST-based request. !/usr/bin/env python3 -- coding: utf-8 -- """This template can be used to detect a Laravel debug information leak by making a POST-based request.""" from kittysploit import from...

Laravel End-of-Life Detection

Detected Laravel framework versions that had reached End-of-Life EOL and no longer received security updates. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Laravel framework versions that had reached End-of-Life EOL and no longer received security updates.""" from kittysploit import from...

Laravel File Manager - Panel Detect

Laravel File Manager panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Laravel File Manager panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Laravel File Manager - Panel Detect',...