Totaljs <3.2.3 - Local File Inclusion Detection

Total.js Platform before 3.2.3 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Total.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Totaljs 3.2.3 - Local File Inclusion Detection...

WordPress Advanced Access Manager - Path Traversal Detection

The Advanced Access Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Read in versions up to, and including, 5.9.8.1 due to insufficient validation on the aam-media parameter. This allows unauthenticated attackers to read any file on the server, including sensitive file...

IceWarp Mail Server <=10.4.4 - Local File Inclusion Detection

IceWarp Mail Server through 10.4.4 is prone to a local file inclusion vulnerability via webmail/calendar/minimizer/index.php?style=..%5c directory traversal. !/usr/bin/env python3 -- coding: utf-8 -- """IceWarp Mail Server through 10.""" from kittysploit import from lib.protocols.http.httpclient...

WordPress Advanced Access Manager < 5.9.9 - Local File Inclusion Detection

WordPress Advanced Access Manager versions before 5.9.9 are vulnerable to local file inclusion and allows attackers to download the wp-config.php file and get access to the database, which is publicly reachable on many servers. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Advanced Acces...

WordPress GTranslate <2.8.52 - Cross-Site Scripting Detection

WordPress GTranslate plugin before 2.8.52 contains an unauthenticated reflected cross-site scripting vulnerability via a crafted link. This requires use of the hreflang tags feature within a sub-domain or sub-directory paid option. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress GTranslate...

WordPress Woody Ad Snippets <2.2.5 - Cross-Site Scripting/Remote Code Execution Detection

WordPress Woody Ad Snippets prior to 2.2.5 is susceptible to cross-site scripting and remote code execution via admin/includes/class.import.snippet.php, which allows unauthenticated options import as demonstrated by storing a cross-site scripting payload for remote code execution. !/usr/bin/env...

Kentico CMS 8.2 - Open Redirect Detection

Kentico CMS 8.2 contains an open redirect vulnerability via GetDocLink.ashx with link variable. An attacker can construct a URL within the application that causes a redirection to an arbitrary external domain. !/usr/bin/env python3 -- coding: utf-8 -- """Kentico CMS 8.""" import re from kittysplo...

Iomega LenovoEMC NAS Login Panel - Detect

Iomega LenovoEMC NAS login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Iomega LenovoEMC NAS login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Iomega LenovoEMC NAS Login...

SugarCRM 3.5.1 - Cross-Site Scripting Detection

SugarCRM 3.5.1 is vulnerable to cross-site scripting via phprint.php and a parameter name in the query string aka a $key variable. !/usr/bin/env python3 -- coding: utf-8 -- """SugarCRM 3.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Oracle Secure Global Desktop Administration Console 4.4 - Cross-Site Scripting Detection

Oracle Secure Global Desktop Administration Console 4.4 contains a reflected cross-site scripting vulnerability in helpwindow.jsp via all parameters, as demonstrated by the sgdadmin/faces/comsunwebui/help/helpwindow.jsp windowTitle parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Oracle...

SolarWinds Database Performance Analyzer 11.1.457 - Cross-Site Scripting Detection

SolarWinds Database Performance Analyzer 11.1.457 contains a reflected cross-site scripting vulnerability in its idcStateError component, where the page parameter is reflected into the HREF of the 'Try Again' Button on the page, aka a /iwc/idcStateError.iwc?page= URI. !/usr/bin/env python3 --...

DedeCMS 5.7 SP2 - Cross-Site Scripting Detection

DedeCMS 5.7 SP2 is vulnerable to cross-site scripting via the function named GetPageList defined in the include/datalistcp.class.php file that is used to display the page numbers list at the bottom of some templates, as demonstrated by the PATHINFO to /member/index.php, /member/pm.php,...

Cisco Adaptive Security Appliance Software/Cisco Firepower Threat Defense - Directory Traversal Detection

Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software are susceptible to directory traversal vulnerabilities that could allow an unauthenticated, remote attacker to obtain read and delete access to sensitive files on a targeted system. !/usr/bin/env python...

ClearML Panel - Detect

ClearML was detected. ClearML is an open-source MLOps platform for experiment tracking, model management, and pipeline orchestration. Exposed instances may allow access to ML experiments, models, and infrastructure configurations. !/usr/bin/env python3 -- coding: utf-8 -- """ClearML was...

Perforce Repository Disclosure Detection

Detected an exposed .p4ignore file, which could have revealed ignored files, sensitive paths, or developer-specific information useful for further enumeration. !/usr/bin/env python3 -- coding: utf-8 -- """Detected an exposed .""" from kittysploit import from lib.protocols.http.httpclient import...

NETGEAR Router Panel - Detect

NETGEAR router panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """NETGEAR router panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'NETGEAR Router Panel - Detect',...

Silverlight cross-domain policy Detection

Detects Silverlight cross-domain policy. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Silverlight cross-domain policy.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Silverlight cross-domain policy Detection...

Apache OFBiz 17.12.03 - Cross-Site Scripting Detection

Apache OFBiz 17.12.03 contains cross-site scripting and unsafe deserialization vulnerabilities via an XML-RPC request. !/usr/bin/env python3 -- coding: utf-8 -- """Apache OFBiz 17.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: inf...

Dashy <= 4.3.6 - Reflected XSS via Workspace Detection

Dashy versions up to 4.3.6 contain a reflected cross-site scripting vulnerability in the workspace view. The url query parameter is passed directly to an iframe src attribute without scheme validation, allowing an attacker to inject javascript: URIs that execute arbitrary JavaScript in the contex...

PHP IPAM Installation Page - Exposed Detection

PHP IPAM is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """PHP IPAM is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

OpenSNS - Remote Code Execution Detection

OpenSNS allows remote unauthenticated attackers to execute arbitrary code via the 'shareBox' endpoint. !/usr/bin/env python3 -- coding: utf-8 -- """OpenSNS allows remote unauthenticated attackers to execute arbitrary code via the 'shareBox' endpoint.""" import re from kittysploit import from...

iTop Hub Connector - Information Disclosure Detection

Combodo iTop is a simple, web based IT Service Management tool. Server, OS, DBMS, PHP, and iTop info name, version and parameters can be read by anyone having access to iTop URI. This issue has been patched in versions 2.7.11, 3.0.5, 3.1.2, and 3.2.0. !/usr/bin/env python3 -- coding: utf-8 --...

Symfony Profiler - Remote Access via Injected Arguments Detection

symfony/runtime is a module for the Symphony PHP framework which enables decoupling PHP applications from global state. When the registerargvargc php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment or debug mode used by...

Jenkin Audit Trail <=3.2 - Cross-Site Scripting Detection

Jenkins Audit Trail 3.2 and earlier does not escape the error message for the URL Patterns field form validation, resulting in a reflected cross-site scripting vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """Jenkins Audit Trail 3.""" from kittysploit import from...

Asanhamayesh CMS 3.4.6 - Local File Inclusion Detection

Asanhamayesh CMS 3.4.6 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Asanhamayesh CMS 3.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Asanhamayesh CMS 3.4.6 - Local...

XBackBone Installer - Exposure Detection

Checks for the presence of a XBackBone Installer. !/usr/bin/env python3 -- coding: utf-8 -- """Checks for the presence of a XBackBone Installer.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'XBackBone Installer -...

BMC Discovery Outpost Admin Panel - Detect

BMC Discovery Outpost admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """BMC Discovery Outpost admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'BMC Discovery Outpost Admin...

Node Shrinkwrap Exposure Detection

A file created by npm shrinkwrap. It is identical to package-lock.json. !/usr/bin/env python3 -- coding: utf-8 -- """A file created by npm shrinkwrap.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Node Shrinkwrap...

Dolibarr <7.0.2 - Cross-Site Scripting Detection

Dolibarr before 7.0.2 is vulnerable to cross-site scripting and allows remote attackers to inject arbitrary web script or HTML via the foruserlogin parameter to adherents/cartes/carte.php. !/usr/bin/env python3 -- coding: utf-8 -- """Dolibarr before 7.""" from kittysploit import from...

NPM package.json Disclosure Detection

All NodeJS packages contain a file, usually in the project root, called package.json - this file holds various metadata relevant to the project generated by package managers such as npm, yarn, pnpm. !/usr/bin/env python3 -- coding: utf-8 -- """All NodeJS packages contain a file, usually in the...

Django Debug Configuration Enabled Detection

Django debug configuration is enabled, which allows an attacker to obtain system configuration information such as paths or settings. !/usr/bin/env python3 -- coding: utf-8 -- """Django debug configuration is enabled, which allows an attacker to obtain system configuration information suc.""" fro...

Tenable Nessus Panel - Detect

Tenable Nessus panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Tenable Nessus panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tenable Nessus Panel - Detect', 'description': 'Tenab...

Redis Honeypot - Detect

A Redis honeypot has been identified. The response to the 'QUIT' command differs from real installations, signaling a possible deceptive setup. !/usr/bin/env python3 -- coding: utf-8 -- """A Redis honeypot has been identified.""" import socket from kittysploit import from...

Openssl Detect

Detects Openssl Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Openssl Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Openssl Detect', 'description': 'Detects Openssl Detect.', 'author':...

Auerswald COMfortel 1400/2600/3600 IP - Authentication Bypass Detection

Auerswald COMfortel 1400/2600/3600 IP is susceptible to an authentication bypass vulnerability. Inserting the prefix "/about/../" allows bypassing the authentication check for the web-based configuration management interface. This enables attackers to gain access to the login credentials used for...

SysAid Help Desk <15.2 - Local File Inclusion Detection

SysAid Help Desk before 15.2 contains multiple local file inclusion vulnerabilities which can allow remote attackers to read arbitrary files via .. dot dot in the fileName parameter of getGfiUpgradeFile or cause a denial of service CPU and memory consumption via .. dot dot in the fileName paramet...

Lawo AG vsm LTC Time Sync (vTimeSync) - Path Traversal Detection

The web server of Lawo AG vsm LTC Time Sync vTimeSync is affected by a "..." triple dot path traversal vulnerability. By sending a specially crafted HTTP request, an unauthenticated remote attacker could download arbitrary files from the operating system. As a limitation, the exploitation is only...

Boa Web Server - Detect

Boa is a single-tasking HTTP server. That means that unlike traditional web servers, it does not fork for each incoming connection, nor does it fork many copies of itself to handle multiple connections. !/usr/bin/env python3 -- coding: utf-8 -- """Boa is a single-tasking HTTP server.""" import re...

Thruk 2.40-2 - Cross-Site Scripting Detection

Thruk 2.40-2 contains a cross-site scripting vulnerability via /thruk/cgi-bin/status.cgi?style=combined&title=TITLE in the host or title parameter. An attacker can inject arbitrary JavaScript into status.cgi, leading to a triggered payload when accessed by an authenticated user. !/usr/bin/env...

Powertek Firmware <3.30.30 - Authorization Bypass Detection

Powertek firmware multiple brands before 3.30.30 running Power Distribution Units are vulnerable to authorization bypass in the web interface. To exploit the vulnerability, an attacker must send an HTTP packet to the data retrieval interface /cgi/getparam.cgi with the tmpToken cookie set to an...

Haproxy Config - File Disclosure Detection

Haproxy Config file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Haproxy Config file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Haproxy Config - File Disclosure Detection', 'description':...

LabVIEW/NI Service Locator Detection

National Instruments LabVIEW Service Locator detected and enumerated. This services leaks a list of all services provided by the device, hardware capabilities and possibly versions. These hardware devices should not be exposed to the internet. !/usr/bin/env python3 -- coding: utf-8 -- """National...

Endpoint Protector Login Panel - Detect

Endpoint Protector - Reporting and Administration Tool login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Endpoint Protector - Reporting and Administration Tool login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

GitList Disclosure Detection

GitList is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """GitList is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GitList Disclosure Detection', 'description': 'GitList is exposed.', 'author':...

PTC ThingWorx - Panel Detection

PTC ThingWorx is an Industrial IoT IIoT platform for building and deploying connected industrial applications, machine monitoring, and remote service solutions. Exposed instances may provide unauthenticated access to IIoT dashboards and connected device management interfaces. !/usr/bin/env python...

Discover production log files Detection

Production log file was exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Production log file was exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Discover production log files Detection', 'description':...

Pterodactyl game server - Panel Detection

Detects Pterodactyl game server management panel. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Pterodactyl game server management panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pterodactyl game server...

Plone CMS detect

Detects Plone CMS !/usr/bin/env python3 -- coding: utf-8 -- """Detects Plone CMS.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Plone CMS detect', 'description': 'Detects Plone CMS', 'author': 'KittySploit Team',...

Procfile Config - Detect

Procfile configuration information was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Procfile configuration information was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Procfile Config...

First Poste.io Configuration Installation Wizard Detection

Poste.io is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Poste.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'First Poste.io Configuration...