YesWiki - Cross-Site Scripting Detection

YesWiki versions 4.5.3 are vulnerable to multiple reflected cross-site scripting XSS vulnerabilities, allowing arbitrary JavaScript execution. !/usr/bin/env python3 -- coding: utf-8 -- """YesWiki versions 4.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

PraisonAI AgentOS - Information Disclosure Detection

PraisonAI's AgentOS FastAPI application server exposes an unauthenticated GET /api/agents endpoint that lists every registered agent's name, role and the opening of its instructions system prompt. No authentication is enforced on the route, allowing a remote attacker to enumerate agent...

WordPress Pie Register <3.7.0.1 - Cross-Site Scripting Detection

WordPress Pie Register plugin before 3.7.0.1 is susceptible to cross-site scripting. The plugin does not sanitize the invitaioncode GET parameter when outputting it in the Activation Code page. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the...

InfluxDB Version Information - Detect

InfluxDB version information check was conducted. !/usr/bin/env python3 -- coding: utf-8 -- """InfluxDB version information check was conducted.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'InfluxDB Version...

Yearning - Directory Traversal Detection

Yearning has a directory traversal vulnerability that can be exploited by attackers to obtain sensitive information. The vulnerability is present in multiple versions of Yearning. !/usr/bin/env python3 -- coding: utf-8 -- """Yearning has a directory traversal vulnerability that can be exploited b...

Hikvision Springboot Env Actuator - Detect

The HIKVISION comprehensive security management platform has information leakage vulnerabilities, through which attackers can obtain sensitive information such as environment env for further attacks !/usr/bin/env python3 -- coding: utf-8 -- """The HIKVISION comprehensive security management...

phpMyChat-Plus 1.98 - Cross-Site Scripting Detection

phpMyChat-Plus 1.98 contains a cross-site scripting vulnerability via pmcusername parameter of passreset.php in password reset URL. !/usr/bin/env python3 -- coding: utf-8 -- """phpMyChat-Plus 1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

eG Manager Detect

Detects eG Manager Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects eG Manager Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'eG Manager Detect', 'description': 'Detects eG Manager Detect.',...

EWEBS - Local File Inclusion Detection

EWEBS is vulnerable to local file inclusion and allows remote attackers to disclose the content of locally stored files via the 'LanguageS' parameter supplied to the 'casmain.xgi' endpoint. !/usr/bin/env python3 -- coding: utf-8 -- """EWEBS is vulnerable to local file inclusion and allows remote...

AWS Cloudfront service detection

Detect websites using AWS cloudfront service !/usr/bin/env python3 -- coding: utf-8 -- """Detect websites using AWS cloudfront service.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AWS Cloudfront service detection...

GnuBoard5 5.5.16 - Open Redirect Detection

Gnuboard5 5.5.16 contains an open redirect vulnerability caused by insufficient URL parameter verification in bbs/logout.php, letting remote attackers redirect users to arbitrary URLs, exploit requires crafted URL parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Gnuboard5 5.""" import re...

Responsive FileManager <9.13.4 - Local File Inclusion Detection

Responsive FileManager before version 9.13.4 is vulnerable to local file inclusion via filemanager/ajaxcalls.php because it uses external input to construct a pathname that should be within a restricted directory, aka local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Responsive...

VelotiSmart Wifi - Directory Traversal Detection

VelotiSmart WiFi B-380 camera devices allow directory traversal via the uc-http service 1.0.0, as demonstrated by /../../etc/passwd on TCP port 80. !/usr/bin/env python3 -- coding: utf-8 -- """VelotiSmart WiFi B-380 camera devices allow directory traversal via the uc-http service 1.""" import re...

Vite Dev Server - Path Traversal in Optimized Deps .map Handling Detection

Vite development server versions prior to 8.0.5, 7.3.2, and 6.4.2 are vulnerable to path traversal through the optimized dependencies sourcemap handler. The dev server's handling of .map requests for optimized dependencies resolves file paths via normalizePathpath.resolveroot, url.slice1 and call...

Joomla! Component Percha Fields Attach 1.0 - Directory Traversal Detection

A directory traversal vulnerability in the Percha Fields Attach comperchafieldsattach component 1.x for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding:...

Razer Sila Gaming Router 2.0.441_api-2.0.418 - Local File Inclusion Detection

Razer Sila Gaming Router 2.0.441api-2.0.418 is vulnerable to local file inclusion which could allow attackers to read arbitrary files. !/usr/bin/env python3 -- coding: utf-8 -- """Razer Sila Gaming Router 2.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient...

PACSOne Server 6.6.2 - Local File Inclusion Detection

PACSOne Server 6.6.2 is vulnerable to local file inclusion via its integrated DICOM Web Viewer. !/usr/bin/env python3 -- coding: utf-8 -- """PACSOne Server 6.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Locklizard Web Viewer Login Panel - Detect

Locklizard Web Viewer login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Locklizard Web Viewer login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Locklizard Web Viewer Login...

Deprecated Feature-Policy Header - Detection

Detected the presence of the deprecated Feature-Policy HTTP response header. The Feature-Policy header has been deprecated and replaced by the Permissions-Policy header. While Feature-Policy is still supported in some browsers for backward compatibility, it is recommended to migrate to...

Materialize CSS - Detect

Detected the presence of Materialize, a modern responsive front-end framework based on Material Design. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the presence of Materialize, a modern responsive front-end framework based on Material Design.""" import re from kittysploit import from...

WordPress Easy Pricing Tables <3.2.1 - Cross-Site Scripting Detection

WordPress Easy Pricing Tables plugin before 3.2.1 contains a reflected cross-site scripting vulnerability. It does not sanitize and escape a parameter before reflecting it back in a page available to any user both authenticated and unauthenticated when a specific setting is enabled. !/usr/bin/env...

Froxlor Server Management Backup File - Detect

Froxlor Server Management backup file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Froxlor Server Management backup file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Froxlor Server...

Joomla HTTP Header Unauthenticated - Remote Code Execution Detection

Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via the HTTP User-Agent header, as exploited in the wild in December 2015 !/usr/bin/env python3 -- coding: utf-8 -- """Joomla! 1.""" from kittysploit import from...

Spotweb <= 1.5.1 - Cross Site Scripting Detection

Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the newpassword1 parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Cross-site scripting XSS vulnerability in...

GNU Mailman Panel - Detect

GNU Mailman panel was detected. Panel exposes all public mailing lists on server. !/usr/bin/env python3 -- coding: utf-8 -- """GNU Mailman panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GNU Mailm...

Netgate pfSense Plus - Login Panel Detection

Netgate pfSense Plus firewall login panel detected. !/usr/bin/env python3 -- coding: utf-8 -- """Netgate pfSense Plus firewall login panel detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Netgate pfSense Plu...

Tinymce Thumbnail Gallery <=1.0.7 - Local File Inclusion Detection

Tinymce Thumbnail Gallery 1.0.7 and before are vulnerable to local file inclusion via download-image.php. !/usr/bin/env python3 -- coding: utf-8 -- """Tinymce Thumbnail Gallery 1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info...

GetSimple CMS Detection

Template to detect a running GetSimple CMS instance !/usr/bin/env python3 -- coding: utf-8 -- """Template to detect a running GetSimple CMS instance.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GetSimple CMS...

ASUS DSL-AC88U - Authentication Bypass Detection

A vulnerability in the ASUS DSL-AC88U router permits unauthorized individuals to bypass authentication.When adding "/js/..%2f%2f" or "/images/..%2f%2e" to the requested URL, it will be recognized as passing the authentication.This vulnerability is part of a broader authentication bypass issue...

Changedetection.io Panel Detection

Detects Changedetection.io website change monitoring panels. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Changedetection.io panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "Changedetection.io Panel...

Amazon Web Services S3 Explorer - Detect

Amazon Web Services S3 Explorer page was detected. Page contains links to sensitive information. !/usr/bin/env python3 -- coding: utf-8 -- """Amazon Web Services S3 Explorer page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Geoserver - Server-Side Request Forgery Detection

GeoServer through 2.18.5 and 2.19.x through 2.19.2 allows server-side request forgery via the option for setting a proxy host. !/usr/bin/env python3 -- coding: utf-8 -- """GeoServer through 2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

TeamCity < 2023.11.4 - Authentication Bypass Detection

In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible !/usr/bin/env python3 -- coding: utf-8 -- """In JetBrains TeamCity before 2023.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

TeamCity < 2023.11.4 - Authentication Bypass Detection

In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible !/usr/bin/env python3 -- coding: utf-8 -- """In JetBrains TeamCity before 2023.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Symfony properties.ini File Disclosure Detection

Detects Symfony properties.ini File Disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Symfony properties.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Symfony properties.ini File Disclosure...

Star Micronics Network Utility Panel - Detect

Star Micronics Network Utility panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Star Micronics Network Utility panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Star Micronics Networ...

SAP Logon Error Message Detection

Identifies "Logon Error Message" in the SAP Internet Communication Framework which returns a 404 status code. !/usr/bin/env python3 -- coding: utf-8 -- """Identifies "Logon Error Message" in the SAP Internet Communication Framework which returns a 404 status code.""" from kittysploit import from...

Sophos Web Appliance Detection

Detects Sophos Web Appliance. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Sophos Web Appliance.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sophos Web Appliance Detection', 'description': 'Detects Sophos...

SHOUTcast Server Panel - Detect

SHOUTcast Server panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SHOUTcast Server panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SHOUTcast Server Panel - Detect', 'description':...

S3CMD Configuration - Detect

S3CMD configuration information was detected. !/usr/bin/env python3 -- coding: utf-8 -- """S3CMD configuration information was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'S3CMD Configuration - Detect',...

Slurm HPC Dashboard - Detect

Slurm HPC Dashboard was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Slurm HPC Dashboard was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Slurm HPC Dashboard - Detect', 'description': 'Slurm HP...

WordPress 3D FlipBook <= 1.16.17 - Information Disclosure Detection

WordPress 3D FlipBook - PDF Flipbook Viewer, Flipbook Image Gallery plugin versions = 1.16.17 contain a missing authorization vulnerability in multiple AJAX endpoints. The fb3dsendpostsin, fb3dsendpostpages, fb3dsendpostsinpages, fb3dsendpostsinfirstpage, and fb3dsendpostfirstpage handlers are...

Ruijie Phpinfo Configuration - Detect

Ruijie phpinfo configuration was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ruijie phpinfo configuration was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ruijie Phpinfo Configuration - Detect...

WordPress Google Analytics - Full Path Disclosure Detection

Detected WordPress Google Analytics Dashboard Plugin for WordPress by MonsterInsights, potentially revealing analytics data, file paths, and errors. !/usr/bin/env python3 -- coding: utf-8 -- """Detected WordPress Google Analytics Dashboard Plugin for WordPress by MonsterInsights, potentially...

Filestash Admin Password Configuration Detection

Filestash is susceptible to the Admin Password Configuration page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Filestash is susceptible to the Admin Password Configuration page exposure due to misconfiguration.""" from kittysploit import from...

ProcessWire Login - Panel Detect

ProcessWire login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ProcessWire login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ProcessWire Login - Panel Detect', 'description...

GROWI Installer - Exposure Detection

Checks for the presence of a GROWI Installer. !/usr/bin/env python3 -- coding: utf-8 -- """Checks for the presence of a GROWI Installer.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GROWI Installer - Exposure...

Detect Spring Gateway Actuator

Sensitive environment variables may not be masked !/usr/bin/env python3 -- coding: utf-8 -- """Sensitive environment variables may not be masked.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect Spring Gateway...

AWS Secret Key Detection

Detects AWS Access Key ID + Secret Key co-occurring in HTTP responses. !/usr/bin/env python3 -- coding: utf-8 -- """Detects AWS Secret Key.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AWS Secret Key...

Debug Endpoint pprof - Exposure Detection

The debugging endpoint /debug/pprof is exposed over the unauthenticated Kubelet healthz port. This debugging endpoint can potentially leak sensitive information such as internal Kubelet memory addresses and configuration, or for limited denial of service. Versions prior to 1.15.0, 1.14.4, 1.13.8,...