Socomec DIRIS A-40 Devices Password Disclosure Detection

Socomec DIRIS A-40 devices before 48250501 are susceptible to a password disclosure vulnerability in the web interface that could allow remote attackers to get full access to a device via the /password.jsn URI. !/usr/bin/env python3 -- coding: utf-8 -- """Socomec DIRIS A-40 devices before 4825050...

OPNsense Panel - Detect

OPNsense panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """OPNsense panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OPNsense Panel - Detect', 'description': 'OPNsense panel was...

Wavlink WN-533A8 - Cross-Site Scripting Detection

Wavlink WN-533A8 M33A8.V5030.190716 contains a reflected cross-site scripting vulnerability via the loginpage parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Wavlink WN-533A8 M33A8.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

WordPress WP Courses Plugin Information Disclosure Detection

WordPress WP Courses Plugin 2.0.29 contains a critical information disclosure which exposes private course videos and materials. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress WP Courses Plugin 2.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Concrete5 Detection

An instance running Concrete5 is detected by looking for specific HTTP headers, HTML tags, and known endpoints. !/usr/bin/env python3 -- coding: utf-8 -- """An instance running Concrete5 is detected by looking for specific HTTP headers, HTML tags, and known endpoints.""" from kittysploit import...

SonarQube - Authentication Bypass Detection

SonarQube 8.4.2.36762 allows remote attackers to discover cleartext SMTP, SVN, and GitLab credentials via the api/settings/values URI. !/usr/bin/env python3 -- coding: utf-8 -- """SonarQube 8.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

VMware vRealize Detection

Version of VMware vRealize Operations Manager !/usr/bin/env python3 -- coding: utf-8 -- """Version of VMware vRealize Operations Manager.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'VMware vRealize Detection',...

KeyCloak - Information Exposure Detection

A flaw was found in keycloak in versions prior to 13.0.0. The client registration endpoint allows fetching information about PUBLIC clients like client secret without authentication which could be an issue if the same PUBLIC client changed to CONFIDENTIAL later. The highest threat from this...

YesWiki <2022-07-07 - Cross-Site Scripting Detection

YesWiki before 2022-07-07 contains a cross-site scripting vulnerability via the id parameter in the AccueiL URL. !/usr/bin/env python3 -- coding: utf-8 -- """YesWiki before 2022-07-07 contains a cross-site scripting vulnerability via the id parameter in the AccueiL UR.""" from kittysploit import...

XWiki >= 2.5-milestone-2 - Cross-Site Scripting Detection

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page XSS. It's possible to exploit the resubmit template to perform a XSS, e.g. by using URL such as:...

EyouCms v1.6.3 - Information Disclosure Detection

EyouCms v1.6.3 was discovered to contain an information disclosure vulnerability via the component /custommodelpath/recruit.filelist.txt. !/usr/bin/env python3 -- coding: utf-8 -- """EyouCms v1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

JumpServer - Open Redirect via Referer Header Detection

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to v3.10.19 and v4.10.5, The /core/i18n// endpoint uses the Referer header as the redirection target without proper validation, which could lead to an Open Redirect vulnerability. !/usr/bin/env...

BlackMoon FTP Chaos Edition Service - Detect

BlackMoon FTP Chaos Edition service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """BlackMoon FTP Chaos Edition service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info =...

Lexmark Device Detect

Detects Lexmark Device Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Lexmark Device Detect.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Lexmark Device Detect', 'description': 'Detects...

Cloudlog Panel - Detect

Cloudlog panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Cloudlog panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cloudlog Panel - Detect', 'description': 'Cloudlog panel was...

Inspur Clusterengine V4 SYSshell - Remote Command Execution Detection

Inspur Clusterengine V4 SYSshell was found and allows remote command execution by design. !/usr/bin/env python3 -- coding: utf-8 -- """Inspur Clusterengine V4 SYSshell was found and allows remote command execution by design.""" import re from kittysploit import from lib.protocols.http.httpclient...

Action Controller Exception - Page Detection

Detects Action Controller Exception - Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Action Controller Exception - Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Action Controller Exception - Page...

Khoj - Detect

Khoj was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Khoj was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Khoj - Detect', 'description': 'Khoj was detected.', 'author': 'KittySploit Team',...

Milesight Industrial Cellular Routers - Information Disclosure Detection

A critical security vulnerability has been identified in Milesight Industrial Cellular Routers, compromising the security discovered that it was publicly disclosing system logs, which included internal information. !/usr/bin/env python3 -- coding: utf-8 -- """A critical security vulnerability has...

SeedDMS Login Panel - Detect

SeedDMS login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SeedDMS login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SeedDMS Login Panel - Detect', 'description': 'SeedDMS...

Wordpress sym404 directory Detection

Searches for sensitive directories present in the sym404. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for sensitive directories present in the sym404.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name'...

Weaver OA 9.5 - Information Disclosure Detection

A vulnerability was found in Weaver OA 9.5 and classified as problematic. This issue affects some unknown processing of the file /building/backmgr/urlpage/mobileurl/configfile/jx2config.ini. The manipulation leads to files or directories accessible. The attack may be initiated remotely...

The Plus Addons for Elementor Page Builder < 4.1.7 - Authentication Bypass Detection

The Plus Addons for Elementor plugin before version 4.1.7 allowed attackers to bypass authentication, gain admin access, and create accounts with elevated roles, even when registration was disabled and the Login widget was inactive. !/usr/bin/env python3 -- coding: utf-8 -- """The Plus Addons for...

Wanhu OA download_ftp.jsp - Arbitrary File Read Detection

There is an arbitrary file download vulnerability in the Wanhu OA downloadftp.jsp file. An attacker can download any file on the server through the vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """There is an arbitrary file download vulnerability in the Wanhu OA downloadftp.""" from...

Nordex Control Wind Farm Portal Login Panel - Detect

Nordex Control Wind Farm Portal login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Nordex Control Wind Farm Portal login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Nordex...

ArcServe Panel - Detect

Detects ArcServe Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects ArcServe Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ArcServe Panel - Detect', 'description': 'Detects ArcServ...

Auth.json File - Disclosure Detection

auth.json file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """auth.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Auth.json File - Disclosure Detection', 'description': 'auth.json file is exposed.',...

COMMAX Smart Home Ruvie CCTV Bridge DVR - RTSP Credentials Disclosure Detection

The COMMAX CCTV Bridge for the DVR service allows an unauthenticated attacker to disclose real time streaming protocol RTSP credentials in plain-text. !/usr/bin/env python3 -- coding: utf-8 -- """The COMMAX CCTV Bridge for the DVR service allows an unauthenticated attacker to disclose real time...

Easy-WI Installation Page - Exposure Detection

Easy-WI is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Easy-WI is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Lotus Domino Configuration Page Detection

Lotus Domino configuration file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Lotus Domino configuration file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Lotus Domino Configuration Page...

Atvise Login Panel Detection

An Atvise login panel was discovered. Atvise is a leading visualization and control center solutions based on pure web technology. !/usr/bin/env python3 -- coding: utf-8 -- """An Atvise login panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient cla...

Apache Ozone - Detect

Detects a Apache Ozone web application, a scalable, redundant, and distributed object store for Hadoop and Cloud-native environments. !/usr/bin/env python3 -- coding: utf-8 -- """Detects a Apache Ozone web application, a scalable, redundant, and distributed object store for Hadoop and Clo.""" fro...

Next.js <1.2.3 - Open Redirect Detection

Next.js contains an open redirect via “next/image” due to improper path parsing. !/usr/bin/env python3 -- coding: utf-8 -- """Next.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Next.js 1.2.3 - Open Redirect...

Microsoft SharePoint - Site Pages Disclosure Detection

Microsoft SharePoint Site Pages library /SitePages/ is accessible without proper authentication, exposing site content, page structure, and potentially sensitive information. The Site Pages library contains modern SharePoint pages .aspx files !/usr/bin/env python3 -- coding: utf-8 -- """Microsoft...

WordPress Plugin iThemes Security - Full Path Disclosure Detection

WordPress Plugin iThemes Security files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin iThemes Security files are publicly accessible...

WAGO WebBased Management - Panel Detection

WAGO WebBased Management was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """WAGO WebBased Management was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WAGO WebBased Management - Panel...

Wordpress directory listing Detection

Directory listing enabled in wordpress. !/usr/bin/env python3 -- coding: utf-8 -- """Directory listing enabled in wordpress.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Wordpress directory listing Detection',...

Microsoft Exchange Server Detect

Check for presence of Exchange Server using Outlook Web App path data. !/usr/bin/env python3 -- coding: utf-8 -- """Check for presence of Exchange Server using Outlook Web App path data.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Honeywell Building Control Detection

Honeywell Building control panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Honeywell Building control panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Honeywell Building Control...

Backup Directory Listing - Detect

Backup Directory Listing folder was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Backup Directory Listing folder was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Backup Directory...

GLPI Status Page - Detect

A php status page that indicates if local or ldap identity is used for glpi. !/usr/bin/env python3 -- coding: utf-8 -- """A php status page that indicates if local or ldap identity is used for glpi.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanne...

Azure Resource Manager Template - File Exposure Detection

Azure Resource Manager deploy file is disclosed. !/usr/bin/env python3 -- coding: utf-8 -- """Azure Resource Manager deploy file is disclosed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Azure Resource Manager...

PhotoPrism - Unauthenticated Exposure Detection

PhotoPrism instance is running in public mode with authentication disabled PHOTOPRISMAUTHMODE=public, exposing all photos, albums, GPS locations, face recognition data, and server configuration to unauthenticated users. !/usr/bin/env python3 -- coding: utf-8 -- """PhotoPrism instance is running i...

Trinity Audio <= 5.21.0 - Information Exposure Detection

The Trinity Audio Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.21.0 via the /admin/inc/phpinfo.php file that gets created on install. This makes it possible for...

Ventrilo Configuration File - Detect

Ventrilo configuration file was detected, The file discloses the application's Adminpassword and Password. !/usr/bin/env python3 -- coding: utf-8 -- """Ventrilo configuration file was detected, The file discloses the application's Adminpassword and Password.""" from kittysploit import from...

Software Publico Brasileiro i3geo v7.0.5 - Cross-Site Scripting Detection

Portal do Software Publico Brasileiro i3geo v7.0.5 was discovered to contain a cross-site scripting XSS vulnerability via requesttoken.php. !/usr/bin/env python3 -- coding: utf-8 -- """Portal do Software Publico Brasileiro i3geo v7.""" from kittysploit import from lib.protocols.http.httpclient...

cheat.sh Instance - Detection

Detects exposed cheat.sh instances. cheat.sh is a community-driven cheat sheet service that provides quick command-line reference for programming languages and Unix commands. While designed to be public, self-hosted instances may expose internal documentation. !/usr/bin/env python3 -- coding: utf...

Ruckus Wireless Admin Login Panel - Detect

Ruckus Wireless admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ruckus Wireless admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ruckus Wireless Admin Login...

Boa Web Server - Detect

Boa is a single-tasking HTTP server. That means that unlike traditional web servers, it does not fork for each incoming connection, nor does it fork many copies of itself to handle multiple connections. !/usr/bin/env python3 -- coding: utf-8 -- """Boa is a single-tasking HTTP server.""" import re...

Detect Node Exporter Metrics

Information Disclosure of Garbage Collection !/usr/bin/env python3 -- coding: utf-8 -- """Information Disclosure of Garbage Collection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect Node Exporter Metrics',...