GROWI Installer - Exposure Detection

Checks for the presence of a GROWI Installer. !/usr/bin/env python3 -- coding: utf-8 -- """Checks for the presence of a GROWI Installer.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GROWI Installer - Exposure...

Hack5 Cloud C2 - Detect

Cloud C² is a self-hosted web-based command and control suite for networked Hak5 gear that lets you pentest from anywhere. Linux, Mac and Windows computers can host the Cloud C² server while Hak5 gear such as the WiFi Pineapple, LAN Turtle and Packet Squirrel can be provisioned as clients...

Apache Hadoop Panel - Detect

Apache Hadoop panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Hadoop panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Hadoop Panel - Detect', 'description': 'Apache...

Hanming Video Conferencing - Local File Inclusion Detection

Hanming Video Conferencing is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Hanming Video Conferencing is vulnerable to local file inclusion.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclien...

hanwang-detect

Detects hanwang-detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects hanwang-detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'hanwang-detect', 'description': 'Detects hanwang-detect.', 'author':...

HashiCorp Consul Web UI Login Panel - Detect

HashiCorp Consul Web UI login panel was detected, !/usr/bin/env python3 -- coding: utf-8 -- """HashiCorp Consul Web UI login panel was detected,.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HashiCorp Consul Web U...

Hazelcast Management Center - Configuration Exposure Detection

Detected poor architectural configurations or unsecured REST API endpoints in Hazelcast by checking the cluster endpoint, which exposes internal member IPs, UUIDs, and version information. !/usr/bin/env python3 -- coding: utf-8 -- """Detected poor architectural configurations or unsecured REST AP...

Helm Dashboard - Exposure Detection

Detects Helm Dashboard - Exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Helm Dashboard - Exposure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Helm Dashboard - Exposure Detection', 'description':...

HighMail Admin Login Panel - Detect

HighMail admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """HighMail admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HighMail Admin Login Panel - Detect',...

HiveManager Login Panel - Detect

HiveManager login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """HiveManager login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HiveManager Login Panel - Detect', 'description...

Hoppscotch Panel - Detect

Hoppscotch panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Hoppscotch panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Hoppscotch Panel - Detect', 'description': 'Hoppscotch...

HPE OneView - Panel Detect

HPE OneView is an infrastructure management platform that provides automated management, monitoring, and updates for HPE servers, storage, and networking resources through a unified interface. !/usr/bin/env python3 -- coding: utf-8 -- """HPE OneView is an infrastructure management platform that...

HP LaserJet Professional Panel - Detect

HP LaserJet Professional panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """HP LaserJet Professional panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HP LaserJet Professional Panel -...

.htdeployment - Files Tree Cache File Detection

FTP Deployment cache file that contains whole files structure with paths to potentially sensitive files. !/usr/bin/env python3 -- coding: utf-8 -- """FTP Deployment cache file that contains whole files structure with paths to potentially sensitive files.""" from kittysploit import from...

HYPERPLANNING Login Panel - Detect

HYPERPLANNING products was detected. !/usr/bin/env python3 -- coding: utf-8 -- """HYPERPLANNING products was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HYPERPLANNING Login Panel - Detect', 'description...

HyperTest Common Dashboard - Detect

HyperTest Common Dashboard was detected. !/usr/bin/env python3 -- coding: utf-8 -- """HyperTest Common Dashboard was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HyperTest Common Dashboard - Detect',...

IBM Operational Decision Manager - Detect

IBM Operational Decision Manager was detected. !/usr/bin/env python3 -- coding: utf-8 -- """IBM Operational Decision Manager was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'IBM Operational Decision...

IBM OpenAdmin Tool - Panel Detection

Detects IBM OpenAdmin Tool - Panel. !/usr/bin/env python3 -- coding: utf-8 -- """Detects IBM OpenAdmin Tool - Panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'IBM OpenAdmin Tool - Panel Detection', 'description...

IBM Spectrum - Detect

IBM Spectrum products was detected. !/usr/bin/env python3 -- coding: utf-8 -- """IBM Spectrum products was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'IBM Spectrum - Detect', 'description': 'IBM Spectru...

IceWarp - Open Redirect Detection

IceWarp open redirect vulnerabilities were detected. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """IceWarp open redirect vulnerabilities were...

ICT Protege WX Login Panel - Detect

Detects ICT Protege WX Login Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects ICT Protege WX Login Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ICT Protege WX Login Panel -...

Cisco Identity Services Engine Admin Login Panel - Detect

Cisco Identity Services Engine admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Cisco Identity Services Engine admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name'...

Imgproxy Detect

imgproxy is a fast and secure standalone server for resizing, processing, and converting images. !/usr/bin/env python3 -- coding: utf-8 -- """imgproxy is a fast and secure standalone server for resizing, processing, and converting images.""" from kittysploit import from...

Inductive Automation Ignition - Gateway Panel Detection

Inductive Automation Ignition is a widely-deployed industrial SCADA/HMI platform used in manufacturing, utilities, and process industries. The Ignition Gateway web interface provides access to project management, OPC-UA tag browsing, and system configuration. Exposed gateways may allow...

Salesforce Lightning - API Detection

A Salesforce Lightning aura API was detected. !/usr/bin/env python3 -- coding: utf-8 -- """A Salesforce Lightning aura API was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Salesforce Lightning - API...

Sangfor Log Center - Remote Command Execution Detection

Sangfor Log Center is vulnerable to RCE. !/usr/bin/env python3 -- coding: utf-8 -- """Sangfor Log Center is vulnerable to RCE.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sangfor Log Center - Remote Command...

Sanity Studio Panel - Detect

Sanity Studio panel was detected. Sanity is a headless CMS platform. !/usr/bin/env python3 -- coding: utf-8 -- """Sanity Studio panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sanity Studio Panel ...

SAPControl Webmethods - Disclosure Detection

Detected SAP systems where the SAP Start Service sapstartsrv SAPControl SOAP interface exposes the GetInstanceProperties method without requiring authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Detected SAP systems where the SAP Start Service sapstartsrv SAPControl SOAP interface...

SAP NetWeaver Portal - Detect

SAP NetWeaver Portal login has been detected. Note that NetWeaver has multiple default passwords as listed in the references. !/usr/bin/env python3 -- coding: utf-8 -- """SAP NetWeaver Portal login has been detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

SAP Spartacus detect

Spartacus is a lean, Angular-based JavaScript storefront for SAP Commerce Cloud that communicates exclusively through the Commerce REST API. !/usr/bin/env python3 -- coding: utf-8 -- """Spartacus is a lean, Angular-based JavaScript storefront for SAP Commerce Cloud that communicates exclusively...

Sass Lint File Exposure Detection

Detects Sass Lint File Exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Sass Lint File Exposure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sass Lint File Exposure Detection', 'description': 'Detec...

Satis Composer Repository - Detect

Satis composer repository was detected !/usr/bin/env python3 -- coding: utf-8 -- """Satis composer repository was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Satis Composer Repository - Detect',...

ScriptCase Production Environment Login Detection

Detects ScriptCase Production Environment Login. !/usr/bin/env python3 -- coding: utf-8 -- """Detects ScriptCase Production Environment Login.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ScriptCase...

SeaCMS V6.4.5 RCE Detection

A vulnerability in SeaCMS allows remote unauthenticated attackers to execute arbitrary PHP code. !/usr/bin/env python3 -- coding: utf-8 -- """A vulnerability in SeaCMS allows remote unauthenticated attackers to execute arbitrary PHP code.""" from kittysploit import from...

Ruby on Rails secrets.yml File Exposure Detection

Ruby on Rails internal secret file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Ruby on Rails internal secret file is exposed.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ruby on Rails...

SecuritySpy Camera Panel - Detect

SecuritySpy Camera panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SecuritySpy Camera panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SecuritySpy Camera Panel - Detect',...

Selenoid UI Login Panel - Detect

Selenoid UI login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Selenoid UI login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Selenoid UI Login Panel - Detect', 'description...

Seowon 130-SLC router - Remote Code Execution Detection

Seowon 130-SLC router lets remote attackers execute commands without authentication as admin users via the router ip & Portif available in the request. !/usr/bin/env python3 -- coding: utf-8 -- """Seowon 130-SLC router lets remote attackers execute commands without authentication as admin users v...

SGLang - Detect

Detects SGLang, a high-performance LLM serving framework that provides an OpenAI-compatible API default port 30000. This template identifies SGLang by checking for the unique /getmodelinfo endpoint returning "modelpath" and "isgeneration" and Prometheus metrics prefixed with "sglang:". An...

ShareCenter Login Panel - Detect

ShareCenter login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ShareCenter login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ShareCenter Login Panel - Detect', 'description...

Microsoft SharePoint - Exposed Login Endpoint Detection

Detected Microsoft SharePoint login and authentication endpoints. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Microsoft SharePoint login and authentication endpoints.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclien...

Microsoft SharePoint - Layouts Disclosure Detection

Detected exposed SharePoint Layouts endpoints. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed SharePoint Layouts endpoints.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Microsoft SharePoint - Layout...

Shibboleth SSO Detect

A Shibboleth SSO panel was detected !/usr/bin/env python3 -- coding: utf-8 -- """A Shibboleth SSO panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Shibboleth SSO Detect', 'description': 'A Shibbole...

Shopware CMS detect

Detects Shopware CMS !/usr/bin/env python3 -- coding: utf-8 -- """Detects Shopware CMS.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Shopware CMS detect', 'description': 'Detects Shopware CMS', 'author':...

Siemens Logo! 8 Web - Panel Detection

Siemens Logo! 8 Web Login Panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Siemens Logo! 8 Web Login Panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Siemens Logo! 8 Web - Panel...

SillyTavern Panel - Detect

SillyTavern was detected. SillyTavern is a character-based AI roleplay and chat frontend that connects to local or remote LLM backends. Exposed instances may allow unauthenticated access to AI models and conversation history. !/usr/bin/env python3 -- coding: utf-8 -- """SillyTavern was detected."...

Siemens SIMATIC 300 Dashboard - Exposed Detection

An unauthenticated exposed web interface for Siemens SIMATIC S7-300 was discovered, potentially allowing access without any login credentials. !/usr/bin/env python3 -- coding: utf-8 -- """An unauthenticated exposed web interface for Siemens SIMATIC S7-300 was discovered, potentially allowing...

Sitecore Admin Login Panel - Detect

Sitecore admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Sitecore admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sitecore Admin Login Panel - Detect',...

Sitecore 9.3 - Webroot File Read Detection

SiteCore 9.3 is vulnerable to LFI. !/usr/bin/env python3 -- coding: utf-8 -- """SiteCore 9.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sitecore 9.3 - Webroot File Read Detection', 'description': 'SiteCore 9.3 is...

Skeepers Login Panel - Detect

Skeepers login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Skeepers login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Skeepers Login Panel - Detect', 'description':...