Matrix Server Detect

Detects Matrix servers based on .well-known entries. See https://en.wikipedia.org/wiki/Matrixprotocol !/usr/bin/env python3 -- coding: utf-8 -- """Detects Matrix servers based on .""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Meshery - Detect

Meshery is a open source, cloud native manager that enables the design and management of all Kubernetes-based infrastructure and applications multi-cloud. !/usr/bin/env python3 -- coding: utf-8 -- """Meshery is a open source, cloud native manager that enables the design and management of all...

Metabase Installer - Exposure Detection

Detected Metabase installer page, allowing unauthorized database setup and configuration. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Metabase installer page, allowing unauthorized database setup and configuration.""" from kittysploit import from lib.protocols.http.httpclient import...

Metasploit Panel - Detect

Metasploit Web Panel is detected !/usr/bin/env python3 -- coding: utf-8 -- """Metasploit Web Panel is detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Metasploit Panel - Detect', 'description': 'Metasploit W...

Metasploit Setup and Configuration Page - Detect

Metasploit setup and configuration page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Metasploit setup and configuration page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Metasploit Setu...

Micro Focus Enterprise Server Admin Panel - Detect

Micro Focus Enterprise Server Admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Micro Focus Enterprise Server Admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Micro Focus...

Micro Focus Application Lifecycle Management - Panel Detection

Micro Focus Application Lifecycle Management login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Micro Focus Application Lifecycle Management login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclien...

Micro Focus Vibe Login Panel - Detect

Micro Focus Vibe login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Micro Focus Vibe login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Micro Focus Vibe Login Panel - Detect...

Microsoft SharePoint Detect

Check for SharePoint, using HTTP header MicrosoftSharePointTeamServices !/usr/bin/env python3 -- coding: utf-8 -- """Check for SharePoint, using HTTP header MicrosoftSharePointTeamServices.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

MicroStrategy tinyurl - Server-Side Request Forgery (Blind) Detection

Blind server-side SSRF request forgery vulnerability on MicroStrategy URL shortener. !/usr/bin/env python3 -- coding: utf-8 -- """Blind server-side SSRF request forgery vulnerability on MicroStrategy URL shortener.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Milesight Industrial Cellular Routers - Information Disclosure Detection

A critical security vulnerability has been identified in Milesight Industrial Cellular Routers, compromising the security discovered that it was publicly disclosing system logs, which included internal information. !/usr/bin/env python3 -- coding: utf-8 -- """A critical security vulnerability has...

Mirth Connect Admin Panel - Detect

Detects Mirth Connect Administrator panel. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Mirth Connect Administrator panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Mirth Connect Admin Panel - Detect',...

Docker Container - Misconfiguration Exposure Detection

A Docker container misconfiguration was discovered. The Docker daemon can listen for Docker Engine API requests via three different types of Socket - unix, tcp, and fd. With tcp enabled, the default setup provides un-encrypted and un-authenticated direct access to the Docker daemon. It is...

Mitel MiCollab Login Panel - Detect

Mitel MiCollab login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Mitel MiCollab login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Mitel MiCollab Login Panel - Detect',...

Mitel NuPoint Unified Messaging Panel - Detect

Mitel NuPoint Unified Messaging login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Mitel NuPoint Unified Messaging login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Mitel...

Mixed Passive Content Detection

This check detects if there are any passive content being loaded over HTTP instead of HTTPS. !/usr/bin/env python3 -- coding: utf-8 -- """This check detects if there are any passive content being loaded over HTTP instead of HTTPS.""" import re from kittysploit import from...

MobileIron Login Panel - Detect

MobileIron login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """MobileIron login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MobileIron Login Panel - Detect', 'description':...

Molgenis Panel - Exposure Detection

Molgenis emx2 data platform is a software that provides a web-based interface for managing and analyzing data. It might contain sensitive information without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Molgenis emx2 data platform is a software that provides a web-based interface...

Monstra Installation Exposure Detection

Monstra is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Monstra is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Moodle Changelog File Detect

Moodle has a file which describes API changes in core libraries and APIs, and can be used to discover Moodle version. !/usr/bin/env python3 -- coding: utf-8 -- """Moodle has a file which describes API changes in core libraries and APIs, and can be used to discover Moodle v.""" from kittysploit...

Moodle Workplace Login Panel - Detect

Moodle workplace login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Moodle workplace login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Moodle Workplace Login Panel - Detect...

mosparo Exposed Installation Detection

mosparo is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """mosparo is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Detect MRTG

The Multi Router Traffic Grapher !/usr/bin/env python3 -- coding: utf-8 -- """The Multi Router Traffic Grapher.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect MRTG', 'description': 'The Multi Router Traffic...

Microsoft Exchange Autodiscover - Local Domain Exposure Detection

Microsoft Exchange is prone to a local domain exposure using the Autodiscover v2 endpoint. !/usr/bin/env python3 -- coding: utf-8 -- """Microsoft Exchange is prone to a local domain exposure using the Autodiscover v2 endpoint.""" import re from kittysploit import from lib.protocols.http.httpclien...

MSPControl Login Panel - Detect

MSPControl login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """MSPControl login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MSPControl Login Panel - Detect', 'description':...

Mura CMS Setup Page - Exposure Detection

Detects exposed Mura CMS Setup page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed Mura CMS Setup page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Mura CMS Setup Page - Exposure Detection',...

MyBB Installation Panel - Detect

Detects exposed MyBB Installation page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed MyBB Installation page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MyBB Installation Panel - Detect',...

myLittleBackup Panel - Detect

myLittleBackup panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """myLittleBackup panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'myLittleBackup Panel - Detect',...

MySQL Conifg - Exposure Detection

Detects exposure of MySQL credentials, configuration, and command history via HTTP. Exposure of files such as .my.cnf and .mysqlhistory may lead to leakage of database passwords or SQL history, enabling attackers to compromise databases. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposu...

MyuCMS - Local File Inclusion Detection

MyuCMS is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """MyuCMS is vulnerable to local file inclusion.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MyuCMS - Local File...

3CX Phone System - Installer Page Exposure Detection

A 3CX Phone System installer or setup wizard page is publicly accessible. This web-based configuration tool is used for initial PBX setup including admin credential creation, SIP trunk configuration, license activation, and network settings. Exposure of this page allows unauthenticated attackers ...

3CX Management Console - Local File Inclusion Detection

3CX Management Console is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """3CX Management Console is vulnerable to local file inclusion.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

n8n Panel - Detect

The worlds most popular workflow automation platform for technical teams !/usr/bin/env python3 -- coding: utf-8 -- """The worlds most popular workflow automation platform for technical teams.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Named Process Exporter Detection

Named process exporter is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Named process exporter is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Named Process Exporter Detection', 'description':...

NConf Login Panel - Detect

NConf login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """NConf login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'NConf Login Panel - Detect', 'description': 'NConf login...

Neo4j Neodash Config - Exposure Detection

Detects the file config.json from Neo4j Neodash web application, it contains information about DB connection with Neo4J. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the file config.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Netbeans Config - Detect

Netbeans configuration information was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Netbeans configuration information was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Netbeans Config...

NETGEAR Routers - Serial Number Disclosure Detection

Multiple NETGEAR router models disclose their serial number which can be used to obtain the admin password if password recovery is enabled. !/usr/bin/env python3 -- coding: utf-8 -- """Multiple NETGEAR router models disclose their serial number which can be used to obtain the admin password if ."...

NETGEAR WAC124 - Authentication Bypass Detection

NETGEAR WAC124 AC2000 routers contain an authentication bypass vulnerability. An attacker can gain access by bypassing proper authentication, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 --...

Netis E1+ V1.2.32533 - WiFi Password Disclosure Detection

A vulnerability in Netis allows remote unauthenticated users to disclose the WiFi password of the remote device. !/usr/bin/env python3 -- coding: utf-8 -- """A vulnerability in Netis allows remote unauthenticated users to disclose the WiFi password of the remote devic.""" from kittysploit import...

Netis Router Login Panel - Detect

Netis router login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Netis router login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Netis Router Login Panel - Detect',...

Netlify CMS Admin Login Panel - Detect

Netlify CMS admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Netlify CMS admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Netlify CMS Admin Login Panel -...

Netsparker Enterprise Installer Detection

Netsparker Enterprise is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Netsparker Enterprise is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclien...

Next.js <1.2.3 - Open Redirect Detection

Next.js contains an open redirect via “next/image” due to improper path parsing. !/usr/bin/env python3 -- coding: utf-8 -- """Next.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Next.js 1.2.3 - Open Redirect...

Ngrok Status Page Detection

Ngrok is a popular platform that provides secure tunnels to localhost, allowing users to expose a local web server to the internet.The Ngrok status page is a web page that provides real-time information about the health and performance of the Ngrok service. !/usr/bin/env python3 -- coding: utf-8 ...

Well-Known Nostr JSON Detection

Detects Nostr public key discovery JSON. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Nostr public key discovery JSON.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Well-Known Nostr JSON Detection',...

NoVus IP Login Panel - Detect

NoVus IP login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """NoVus IP login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'NoVus IP Login Panel - Detect', 'description': 'NoVus...

NPM Anonymous CLI Metrics Json Detection

anonymous-cli-metrics.json internal file in NPM is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """anonymous-cli-metrics.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'NPM Anonymous CLI Metrics Json Detection...

Nuxtjs Config File - File Disclosure Detection

Nuxtjs Config file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Nuxtjs Config file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Nuxtjs Config File - File Disclosure Detection', 'description...

Arbitrary File Read in Dev Mode - Nuxt.js Detection

Vite is misconfigured within nuxt to permit any file to be retrieved from the file system. !/usr/bin/env python3 -- coding: utf-8 -- """Vite is misconfigured within nuxt to permit any file to be retrieved from the file system.""" import re from kittysploit import from lib.protocols.http.httpclien...