Laravel Ignition - Cross-Site Scripting Detection

Laravel Ignition contains a cross-site scripting vulnerability when debug mode is enabled. !/usr/bin/env python3 -- coding: utf-8 -- """Laravel Ignition contains a cross-site scripting vulnerability when debug mode is enabled.""" from kittysploit import from lib.protocols.http.httpclient import...

Laravel Pulse - Unauthenticated Dashboard Access Detection

Laravel Pulse monitoring dashboard is accessible without authentication. Pulse displays server performance metrics, slow queries, user activity, cache hit rates, and exception logs that could aid attackers in reconnaissance. !/usr/bin/env python3 -- coding: utf-8 -- """Laravel Pulse monitoring...

Laravel Sanctum - Stateful Domain CSRF Misconfiguration Detection

Laravel Sanctum's SPA authentication uses cookie-based session authentication for first-party single-page applications. The /sanctum/csrf-cookie endpoint issues XSRF-TOKEN cookies to requesting origins. When SANCTUMSTATEFULDOMAINS is misconfigured with wildcard or overly permissive values, the...

LaunchDarkly - Detect

Detects the presence of LaunchDarkly, a feature management and feature flag platform. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of LaunchDarkly, a feature management and feature flag platform.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Letta Panel - Detect

Letta formerly MemGPT is an open-source framework for building stateful LLM agents with long-term memory. !/usr/bin/env python3 -- coding: utf-8 -- """Letta formerly MemGPT is an open-source framework for building stateful LLM agents with long-term memory.""" from kittysploit import from...

Lighttpd Web Server - Detect

Detected servers running the Lighttpd web server by identifying the Server header in HTTP responses. !/usr/bin/env python3 -- coding: utf-8 -- """Detected servers running the Lighttpd web server by identifying the Server header in HTTP responses.""" from kittysploit import from...

Ligolo-ng Panel - Detect

Ligolo-ng panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ligolo-ng panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ligolo-ng Panel - Detect', 'description': 'Ligolo-ng panel was...

Linkerd Panel - Detect

Linkerd panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Linkerd panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Linkerd Panel - Detect', 'description': 'Linkerd panel was...

Linksys Smart Wi-Fi Login Panel - Detect

Linksys Smart Wi-Fi login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Linksys Smart Wi-Fi login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Linksys Smart Wi-Fi Login Panel...

Linkwarden Panel - Detect

Linkwarden linkwarden.app / github.com/linkwarden/linkwarden is a popular open-source self-hosted bookmark and link archiving manager. Default Docker port 3000. Exposed instances may reveal users' archived link collections, screenshots, and PDFs. !/usr/bin/env python3 -- coding: utf-8 --...

LiteLLM Proxy - Model Exposure Detection

LiteLLM proxy was detected with anonymous access to the model listing API. LiteLLM proxies that ship without generalsettings.masterkey or with the key disabled expose the configured upstream model catalog via /v1/models and /model/info — revealing which OpenAI / Anthropic / Azure / Bedrock /...

LiveZilla Login Panel - Detect

LiveZilla login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """LiveZilla login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LiveZilla Login Panel - Detect', 'description':...

Loxone Intercom Video Panel - Detect

Loxone Intercom Video panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Loxone Intercom Video panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Loxone Intercom Video Panel - Detect',...

Lucee Stack Trace Error Detection

Lucee Stack Trace error exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Lucee Stack Trace error exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Lucee Stack Trace Error Detection', 'description': 'Lucee...

LVM Exporter Metrics Detection

LVM Exporter Metrics is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """LVM Exporter Metrics is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LVM Exporter Metrics Detection', 'description': 'LVM...

LVS DownLoad.aspx - Local File Inclusion (LFI) Detection

LVS lean value management system DownLoad.aspx has an arbitrary file reading vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """LVS lean value management system DownLoad.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info...

Mage AI Panel - Detect

Mage AI mage.ai / github.com/mage-ai/mage-ai is an open-source data pipeline + orchestration platform with a notebook-style UI. Self-hosted instances default to TCP 6789 and historically have shipped without authentication. Exposed instances may reveal pipeline source, secrets, and provide an...

Magento Cacheleak Detection

Magento Cacheleak is an implementation vulnerability, result of bad implementation of web-server configuration for Magento platform. Magento was developed to work under the Apache web-server which natively works with .htaccess files, so all needed configuration directives specific for various...

Magento Detect

Identify Magento !/usr/bin/env python3 -- coding: utf-8 -- """Identify Magento.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Magento Detect', 'description': 'Identify Magento', 'author': 'KittySploit Team',...

Lvmeng - UTS Disclosure Detection

Lvmeng UTS was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Lvmeng UTS was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Lvmeng - UTS Disclosure Detection', 'description': 'Lvmeng UTS was...

Magento Unprotected development files Detection

Magento version 1.9.2.x includes /dev directories or files that might reveal your passwords and other sensitive information. The /dev directories and files are not protected by default. According to Magento, "these tests are not supposed to end up on production servers". !/usr/bin/env python3 --...

MagicFlow - Local File Inclusion Detection

MagicFlow is susceptible to local file inclusion vulnerabilities because it allows remote unauthenticated users to access locally stored files on the server and return their content via the '/msa/main.xp' endpoint and the 'Fun' parameter. !/usr/bin/env python3 -- coding: utf-8 -- """MagicFlow is...

MAGMI (Magento Mass Importer) Plugin Detect

Detects MAGMI Magento Mass Importer Plugin Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects MAGMI Magento Mass Importer Plugin Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MAGMI Magento Mass...

Magnolia CMS Installer Detection

Magnolia CMS is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Magnolia CMS is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclien...

Maian Cart Detection

Detects Maian Cart Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Maian Cart Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.osint.faviconhash import shodanmmh3 class ModuleScanner, Httpclient: info = 'name': 'Maian Cart...

MailWatch Login Panel - Detect

MailWatch login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """MailWatch login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MailWatch Login Panel - Detect', 'description':...

MAMP - PHP Info Exposure Detection

Detected MAMP server was exposed phpinfo page, revealing sensitive PHP configuration, server paths, and environment variables. !/usr/bin/env python3 -- coding: utf-8 -- """Detected MAMP server was exposed phpinfo page, revealing sensitive PHP configuration, server paths, and envi.""" from...

Marqo Vector Search Engine - Detect

Marqo vector search engine was detected. Marqo is an open-source tensor search and vector database that combines vector search with filtering and text/image search for AI applications. !/usr/bin/env python3 -- coding: utf-8 -- """Marqo vector search engine was detected.""" from kittysploit import...

Mautic CRM Login Panel - Detect

Mautic CRM login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Mautic CRM login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Mautic CRM Login Panel - Detect', 'description':...

McAfee ePolicy Orchestrator - Arbitrary File Upload Detection

McAfee ePolicy Orchestrator ePO is vulnerable to a ZipSlip vulnerability which allows arbitrary file upload when archives are unpacked if the names of the packed files are not properly sanitized. An attacker can create archives with files containing "../" in their names, making it possible to...

WordPress Members List <4.3.7 - Cross-Site Scripting Detection

WordPress Members List 4.3.7 does not sanitize and escape some parameters in various pages before outputting them back, leading to reflected cross-site scripting vulnerabilities. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Members List 4.""" from kittysploit import from...

MeshCentral Login Panel - Detect

MeshCentral login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """MeshCentral login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MeshCentral Login Panel - Detect', 'description...

Mezzanine CMS - Detect

Detects instances of Mezzanine CMS based on unique fingerprints and identifiers. !/usr/bin/env python3 -- coding: utf-8 -- """Detects instances of Mezzanine CMS based on unique fingerprints and identifiers.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient...

M-Files Web Login Panel - Detect

M-Files Web login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """M-Files Web login panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'M-Files Web Login Panel - Detect',...

Micro Focus iPrint Appliance - Detect

Micro Focus iPrint Appliance was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Micro Focus iPrint Appliance was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Micro Focus iPrint Appliance - Detect...

Microsoft Azure Web App - Error 404 Detection

Detects Microsoft Azure Web App - Error 404. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Microsoft Azure Web App - Error 404.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Microsoft Azure Web App - Error 4...

MikroTik httpproxy Detection

Detects MikroTik httpproxy. !/usr/bin/env python3 -- coding: utf-8 -- """Detects MikroTik httpproxy.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MikroTik httpproxy Detection', 'description': 'Detects MikroTik...

Mini Mouse 9.2.0 - Local File Inclusion Detection

Mini Mouse 9.2.0 is vulnerable to local file inclusion because it allows remote unauthenticated attackers to include and disclose the content of locally stored files via the 'file' parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Mini Mouse 9.""" from kittysploit import from...

MiniUPnPd - Detect

Detected servers using the MiniUPnPd service through the Server header. !/usr/bin/env python3 -- coding: utf-8 -- """Detected servers using the MiniUPnPd service through the Server header.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanne...

Miniweb Start Page Login Panel - Detect

Miniweb Start Page login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Miniweb Start Page login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Miniweb Start Page Login Panel -...

Misconfigured Concrete5 Detection

Concrete5 CMS is misconfigured. !/usr/bin/env python3 -- coding: utf-8 -- """Concrete5 CMS is misconfigured.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Misconfigured Concrete5 Detection', 'description': 'Concret...

MISP Threat Intelligence Sharing Platform Panel - Detect

Detects MISP Threat Intelligence Sharing Platform Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects MISP Threat Intelligence Sharing Platform Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

MobileIron Sentry Panel - Detect

MobileIron Sentry panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """MobileIron Sentry panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MobileIron Sentry Panel - Detect', 'description...

Mobile Management Platform Panel - Detect

Mobile Management Platform panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Mobile Management Platform panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Mobile Management Platform...

Mojoportal - Detect

Detects Mojoportal - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Mojoportal - Detect.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Mojoportal - Detect', 'description': 'Detects Mojoporta...

MongoDB Ops Manager Login Panel - Detect

MongoDB Ops Manager login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """MongoDB Ops Manager login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MongoDB Ops Manager Login Panel...

Monsta FTP - Detect

Detects Monsta FTP web-based file manager interface. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Monsta FTP web-based file manager interface.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Monsta FTP -...

MonstraCMS Detection

Detects MonstraCMS Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects MonstraCMS Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MonstraCMS Detection', 'description': 'Detects MonstraCMS...

Moxa OnCell VPN - Login Panel Detection

Moxa OnCell VPN panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Moxa OnCell VPN panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Moxa OnCell VPN - Login Panel Detection',...

MPFTVC Admin Login Panel - Detect

MPFTVC admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """MPFTVC admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MPFTVC Admin Login Panel - Detect',...