ArGoSoft FTP Service - Detect

ArGoSoft FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ArGoSoft FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'ArGoSoft FTP Service -...

Baby FTP Service - Detect

Baby FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Baby FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'Baby FTP Service - Detect',...

BGP Detection

The remote host is running BGP, a popular routing protocol. This indicates that the remote host is probably a network router. !/usr/bin/env python3 -- coding: utf-8 -- """The remote host is running BGP, a popular routing protocol.""" import socket from kittysploit import from...

Cerberus FTP Service - Detect

Cerberus FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Cerberus FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'Cerberus FTP Service -...

Checkmk Agent Info Disclosure Detection

The Checkmk agent had exposed sensitive system information on TCP port 6556 without requiring authentication. !/usr/bin/env python3 -- coding: utf-8 -- """The Checkmk agent had exposed sensitive system information on TCP port 6556 without requiring authentication.""" import socket from kittysploi...

Cisco Smart Install Endpoints Exposure Detection

Cisco Smart Install endpoints were discovered. Exposure of SMI to untrusted networks could allow complete compromise of the switch. !/usr/bin/env python3 -- coding: utf-8 -- """Cisco Smart Install endpoints were discovered.""" import socket from kittysploit import from...

ClickHouse - Unauthorized Access Detection

ClickHouse was able to be accessed with no required authentication in place. !/usr/bin/env python3 -- coding: utf-8 -- """ClickHouse was able to be accessed with no required authentication in place.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import...

Fortinet Forticlient Endpoint Management Server - SQL Injection Detection

A improper neutralization of special elements used in an sql command 'sql injection' in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7.0.1 through 7.0.10 allows attacker to execute unauthorized code or commands via specially crafted packets. !/usr/bin/env python3 -- coding:...

Microsoft .NET Remoting httpd - Detect

Microsoft .NET Remoting httpd was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Microsoft .""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'Microsoft .NET Remoting httpd -...

Dumb FTP Service - Detect

Dumb FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Dumb FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'Dumb FTP Service - Detect',...

ESMTP - Detect

ESMTP was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ESMTP was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'ESMTP - Detect', 'description': 'ESMTP was detected....

Redis Server - Unauthenticated Access Detection

Redis server without any required authentication was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Redis server without any required authentication was discovered.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class...

Fortinet FGFM protocol - Detect

FortiGate to FortiManager Protocol FGFM was detected. !/usr/bin/env python3 -- coding: utf-8 -- """FortiGate to FortiManager Protocol FGFM was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient:...

Gene6 FTP Service - Detect

Gene6 FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Gene6 FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'Gene6 FTP Service - Detect',...

Global Site Selector FTP Service - Detect

Global Site Selector FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Global Site Selector FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name':...

Hewlett-Packard FTP Service - Detect

Hewlett-Packard FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Hewlett-Packard FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name':...

iPlanet Messaging Server IMAP Protocol - Detection

iPlanet Messaging Server IMAP protocol was detected. !/usr/bin/env python3 -- coding: utf-8 -- """iPlanet Messaging Server IMAP protocol was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: in...

LANIER MP 2555 FTP Service - Detect

LANIER MP 2555 FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """LANIER MP 2555 FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'LANIER MP...

Memcached stats disclosure Detection

Memcached stats is used to return server statistics such as PID, version, connections, etc. !/usr/bin/env python3 -- coding: utf-8 -- """Memcached stats is used to return server statistics such as PID, version, connections, etc.""" import socket from kittysploit import from...

MongoDB - Unauthenticated Access Detection

MongoDB was able to be accessed with no password. Note that MongoDB does not require a password by default. !/usr/bin/env python3 -- coding: utf-8 -- """MongoDB was able to be accessed with no password.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import...

3Com 3CDaemon FTP Service - Detect

3Com 3CDaemon FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """3Com 3CDaemon FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': '3Com 3CDaemo...

NET Disk FTP Service - Detect

NET Disk FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """NET Disk FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'NET Disk FTP Service -...

Personal FTP Service - Detect

Personal FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Personal FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'Personal FTP Service -...

SAProuter - Detect

The SAProuter is a proxy program that controls and secures communication between SAP systems and external networks. !/usr/bin/env python3 -- coding: utf-8 -- """The SAProuter is a proxy program that controls and secures communication between SAP systems and external netw.""" import socket from...

SIP OPTIONS Detection

Sends a SIP OPTIONS request over TCP then UDP fallback to fingerprint PBX / VoIP endpoints on port 5060. !/usr/bin/env python3 -- coding: utf-8 -- """Detect SIP services via OPTIONS probe TCP then UDP.""" from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient from...

STARTTLS Mail Server Detection

STARTTLS is an email protocol command that tells an email server that an email client, including an email client running in a web browser, wants to turn an existing insecure connection into a secure one. !/usr/bin/env python3 -- coding: utf-8 -- """STARTTLS is an email protocol command that tells...

TeamSpeak 3 ServerQuery Detection

ServerQuery is a commandline based administration tool/feature of TeamSpeak 3 server. !/usr/bin/env python3 -- coding: utf-8 -- """ServerQuery is a commandline based administration tool/feature of TeamSpeak 3 server.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient...

vsFTPd Service - Detect

vsFTPd FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """vsFTPd FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'vsFTPd Service - Detect',...

X2 WS_FTP Service - Detect

X2 WSFTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """X2 WSFTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'X2 WSFTP Service - Detect',...

ZyWALL FTP Service - Detect

ZyWALL FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ZyWALL FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'ZyWALL FTP Service -...

WireGuard Handshake Detection

Best-effort WireGuard detection by sending a Handshake Initiation on UDP 51820. Silent drops are common without a matching peer key. !/usr/bin/env python3 -- coding: utf-8 -- """Detect WireGuard endpoints via handshake probe on UDP 51820.""" from kittysploit import from...

Metatag CMS Detection

Generic CMS Detection using html meta generator tag !/usr/bin/env python3 -- coding: utf-8 -- """Generic CMS Detection using html meta generator tag.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Metatag...

Odoo - Panel Detect

Detects Odoo - Panel Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Odoo - Panel Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Odoo - Panel Detect', 'description': 'Detects Odoo - Panel...

Xceedium Xsuite - read_sessionlog LFI Detection

Detects Xceedium Xsuite LFI via /opm/readsessionlog.php?logFile=....//etc/passwd. !/usr/bin/env python3 -- coding: utf-8 -- """Xceedium Xsuite readsessionlog.php LFI CVE-2015-4666.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Twonky Server 8.5.2 on Linux and Windows - Log File Exposure Detection

Twonky Server 8.5.2 contains a broken access control vulnerability caused by bypassing web service API authentication, letting unauthenticated attackers read log files with administrator credentials, exploit requires no authentication !/usr/bin/env python3 -- coding: utf-8 -- """Twonky Server 8."...

D-Link DAP-1325 - Information Disclosure Detection

Security vulnerability known as Unauthenticated access to settings or Unauthenticated configuration download. This vulnerability occurs when a device, such as a repeater, allows the download of user settings without requiring proper authentication. !/usr/bin/env python3 -- coding: utf-8 --...

Jolokia write to RCE valve Detection

RCE in Jolokia 1.7.1 using AccesLogValve !/usr/bin/env python3 -- coding: utf-8 -- """RCE in Jolokia 1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Jolokia write to RCE valve Detection', 'description': 'RCE in...

Jolokia file write to RCE jfr Detection

File read and file write to RCE by deploying a vhost with MBeanFactory/createStandardHost and DiagnosticCommand/jfrStart !/usr/bin/env python3 -- coding: utf-8 -- """File read and file write to RCE by deploying a vhost with MBeanFactory/createStandardHost and DiagnosticComman.""" from kittysploit...

Quest KACE System Management Appliance 8.0.318 - Remote Code Execution Detection

Detects exposed Quest KACE SMA /common/downloadagentinstaller.php CVE-2018-11138. Requires product-specific response content, not generic page text. !/usr/bin/env python3 -- coding: utf-8 -- """Quest KACE SMA CVE-2018-11138 — downloadagentinstaller.php exposure.""" from kittysploit import from...

phpwind Installer Exposure Detection

phpwind is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """phpwind is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Php Debug Bar - Exposure Detection

The DebugBar integrates easily into projects and can display profiling data from any part of your application.This template detects exposed PHP Debug Bars by looking for known response bodies and the phpdebugbar-id in headers. !/usr/bin/env python3 -- coding: utf-8 -- """The DebugBar integrates...

PHP Detect

Detects PHP Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects PHP Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PHP Detect', 'description': 'Detects PHP Detect.', 'author': 'KittySploit Team',...

Php User.ini Disclosure Detection

PHP user.ini file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """PHP user.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Php User.ini Disclosure Detection', 'description': 'PHP user.ini file is exposed.',...

Pichome Login Panel - Detect

Pichome login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Pichome login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pichome Login Panel - Detect', 'description': 'Pichome...

Pinata API Key - Expose Detection

Detects Pinata API Key - Expose. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Pinata API Key - Expose.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pinata API Key - Expose Detection', 'description': 'Detec...

PinPoint Unauth Detection

PinPoint is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """PinPoint is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PinPoint Unauth Detection', 'description': 'PinPoint is exposed.', 'author':...

Pipfile Config - Detect

Pipfile configuration information was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Pipfile configuration information was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pipfile Config - Detect',...

Pipfile.lock Disclosure Detection

Detects Pipfile.lock Disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Pipfile.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pipfile.lock Disclosure Detection', 'description': 'Detects Pipfile.lock...

Piwigo Login Panel - Detect

Piwigo login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Piwigo login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Piwigo Login Panel - Detect', 'description': 'Piwigo logi...

Piwik Installer Exposure Detection

Piwik is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Piwik is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...