NetSUS Server Login Panel - Detect

NetSUS Server login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """NetSUS Server login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'NetSUS Server Login Panel - Detect',...

Browser Configuration "browserconfig.xml" Exposure Detection

Browser Configuration "browserconfig.xml" File was exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Browser Configuration "browserconfig.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Browser Configuration...

Royal Event Management System - Stored Cross-Site Scripting Detection

Royal Event Management System contains a stored cross-site scripting vulnerability. An attacker can execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other...

Graphite Browser Login Panel - Detect

Graphite Browser login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Graphite Browser login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Graphite Browser Login Panel - Detect...

WordPress WPS Hide Login - Error Log Disclosure Detection

Detected whether the WPS Hide Login plugin’s /classes/ directory was exposed with directory listing enabled due to server misconfiguration, potentially disclosing PHP error logs or source code. !/usr/bin/env python3 -- coding: utf-8 -- """Detected whether the WPS Hide Login plugin’s /classes/...

Adobe Connect Central Version Detection

Detects Adobe Connect Central Version. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Adobe Connect Central Version.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Adobe Connect Central Version Detection',...

Dataease - Default Login Detection

Dataease has a built-in account demo/dataease, and many developers forget to delete or change the account password. As a result, many Dataease can log in with this built-in account. !/usr/bin/env python3 -- coding: utf-8 -- """Dataease has a built-in account demo/dataease, and many developers...

Puppet Node Manager Detection

Detects Puppet Node Manager. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Puppet Node Manager.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Puppet Node Manager Detection', 'description': 'Detects Puppet No...

H2O Driverless AI Panel - Detect

H2O Driverless AI, a commercial automated machine learning AutoML platform that provides a web UI typically served on port 12345 for building and deploying machine learning models, was detected. An exposed H2O Driverless AI login panel was identified. It is distinct from H2O Wave and H2O-3/Flow,...

Ecology Detection

Detects Ecology Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Ecology Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ecology Detection', 'description': 'Detects Ecology Detection.',...

Detect Springboot Configprops Actuator

Sensitive environment variables may not be masked !/usr/bin/env python3 -- coding: utf-8 -- """Sensitive environment variables may not be masked.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect Springboot...

Versa SD-WAN Login Panel - Detect

Versa SD-WAN login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Versa SD-WAN login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Versa SD-WAN Login Panel - Detect',...

Hospital Management System Login Panel - Detect

Hospital Management System login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Hospital Management System login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Hospital Manageme...

Nutanix Web Console Login Panel - Detect

Nutanix Web Console login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Nutanix Web Console login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Nutanix Web Console Login Panel...

PowerLogic ION Panel - Detect

PowerLogic ION panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """PowerLogic ION panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PowerLogic ION Panel - Detect', 'description':...

Tongda OA v11.5 swfupload_new.php - SQL Injection Detection

There is a SQL injection vulnerability in the swfuploadnew.php file of Tongda OA v11.5. An attacker can obtain sensitive information of the server through the vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """There is a SQL injection vulnerability in the swfuploadnew.""" from kittysploi...

NetMizer LogManagement System Data - Directory Exposure Detection

Directory Exposure vulnerability in the NetMizer log management system of Beijing Lingzhou Network Technology Co., Ltd. Due to the loose control of /data, attackers can use this vulnerability to obtain sensitive information. !/usr/bin/env python3 -- coding: utf-8 -- """Directory Exposure...

Portkey AI Detection

Detected Portkey AI interface. Portkey was an AI gateway that provided observability, governance, and reliability for LLM applications. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Portkey AI interface.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Ansible AWX Detection

Detects Ansible AWX Instance !/usr/bin/env python3 -- coding: utf-8 -- """Detects Ansible AWX Instance.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ansible AWX Detection', 'description': 'Detects Ansible AWX...

Netsweeper 4.0.3 - Cross-Site Scripting Detection

A cross-site scripting vulnerability in webadmin/policy/grouptableajax.php/ in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO. !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting...

Drupal - Remote Code Execution Detection

Drupal 8.5.x before 8.5.11 and Drupal 8.6.x before 8.6.10 V contain certain field types that do not properly sanitize data from non-form sources, which can lead to arbitrary PHP code execution in some cases. !/usr/bin/env python3 -- coding: utf-8 -- """Drupal 8.""" from kittysploit import from...

Pulsar Admin Console Panel - Detect

Pulsar admin console panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Pulsar admin console panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pulsar Admin Console Panel - Detect',...

Elastic HD Dashboard Exposure Detection

Elastic HD Dashboard is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Elastic HD Dashboard is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Elastic HD Dashboard Exposure Detection', 'description':...

Github Enterprise Login Panel - Detect

Github Enterprise login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Github Enterprise login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Github Enterprise Login Panel -...

Growatt Shinelink - Login Panel Detection

Growatt Shinelink is a web-based data logger and monitoring interface for Growatt solar inverters, providing real-time solar energy production data and system configuration. !/usr/bin/env python3 -- coding: utf-8 -- """Growatt Shinelink is a web-based data logger and monitoring interface for...

Seeyon A8 Management Monitor - Default Login Detection

Seeyon OA A8-m has status monitoring page information leakage. Attackers can obtain sensitive information such as website paths and user names for further attacks. Attackers can use this vulnerability to directly enter the application system or management system to conduct system, web page, data...

Docker Daemon Exposed Detection

Docker Daemon exposed on the network map can help remote attacker to gain access to the Docker containers and potentially the host system. !/usr/bin/env python3 -- coding: utf-8 -- """Docker Daemon exposed on the network map can help remote attacker to gain access to the Docker containers and .""...

MaxKB Panel - Detect

MaxKB, an open-source RAG-based knowledge base and LLM chatbot platform, was detected. !/usr/bin/env python3 -- coding: utf-8 -- """MaxKB, an open-source RAG-based knowledge base and LLM chatbot platform, was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclien...

Global Traffic Statistics Exposure Detection

Global Traffic Statistics page is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Global Traffic Statistics page is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Global Traffic Statistics Exposure...

Interact Software Panel - Detect

Interact Software was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Interact Software was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Interact Software Panel - Detect', 'description': 'Interact...

FreshRSS Fever API - Exposure Detection

Detected an exposed FreshRSS instance with the Fever API enabled, which could allow unauthorized access to RSS feed data and user-related information via accessible Fever-compatible API endpoints. !/usr/bin/env python3 -- coding: utf-8 -- """Detected an exposed FreshRSS instance with the Fever AP...

JBoss WS JUDDI Console Panel - Detect

The jUDDI Java Universal Description, Discovery and Integration Registry is a core component of the JBoss Enterprise SOA Platform. It is the product's default service registry and comes included as part of the product. In it are stored the addresses end-point references of all the services...

SAPControl OSExecute - Remote Code Execution (RCE) Detection

Detected SAP systems where the SAP Start Service sapstartsrv SAPControl SOAP interface exposes the OSExecute web method without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Detected SAP systems where the SAP Start Service sapstartsrv SAPControl SOAP interface exposes the...

pfSense Login Panel - Detect

pfSense login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """pfSense login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'pfSense Login Panel - Detect', 'description': 'pfSense...

Chamilo Installer Exposure Detection

Chamilo is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Chamilo is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

XXLJOB Admin Login Panel - Detect

XXLJOB admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """XXLJOB admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'XXLJOB Admin Login Panel - Detect',...

Adobe AEM JCR Compare Exposure Detection

Detected an exposed Adobe AEM JCR compare functionality that was accessible without proper authorization. This exposure may have allowed attackers to infer repository structure or sensitive content through comparison operations. !/usr/bin/env python3 -- coding: utf-8 -- """Detected an exposed Ado...

ChurchCRM - Setup Exposure Detection

ChurchCRM setup is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """ChurchCRM setup is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ChurchCRM - Setup Exposure Detection', 'description': 'ChurchCRM...

Apache Streampark - Detect

Detects a Apache Streampark server, a easy-to-use streaming application development framework and operation platform. !/usr/bin/env python3 -- coding: utf-8 -- """Detects a Apache Streampark server, a easy-to-use streaming application development framework and operation pl.""" from kittysploit...

HexStrike AI MCP Agents - Config Detection

HexStrike AI MCP Agents server config page exposure. !/usr/bin/env python3 -- coding: utf-8 -- """HexStrike AI MCP Agents server config page exposure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HexStrike AI MCP...

Cisco Email Security Appliance - Panel Detection

Detected Cisco Email Security Appliance login panel. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Cisco Email Security Appliance login panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cisco Email...

Honeypot Detection

Honeypot was Detected. !/usr/bin/env python3 -- coding: utf-8 -- """Honeypot was Detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Honeypot Detection', 'description': 'Honeypot was Detected.',...

Detect Springboot autoconfig Actuator

Displays an auto-configuration report showing all auto-configuration candidates and the reason why they 'were' or 'were not' applied. !/usr/bin/env python3 -- coding: utf-8 -- """Displays an auto-configuration report showing all auto-configuration candidates and the reason why they 'were'.""" fro...

SMTP2GO Detect

Detects SMTP2GO Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects SMTP2GO Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SMTP2GO Detect', 'description': 'Detects SMTP2GO Detect.', 'author':...

Metaflow UI Panel - Detect

Metaflow is an open-source ML platform created by Netflix for building and managing real-life data science projects. The Metaflow UI provides a web interface for monitoring and managing Metaflow runs and flows. !/usr/bin/env python3 -- coding: utf-8 -- """Metaflow is an open-source ML platform...

M-Bus Converter Web Interface - Detect

Detects M-Bus Converter Web Interface - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects M-Bus Converter Web Interface - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'M-Bus Converter Web Interfa...

openDCIM - Detect

openDCIM is a web-based data centre infrastructure management application. !/usr/bin/env python3 -- coding: utf-8 -- """openDCIM is a web-based data centre infrastructure management application.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Vince Login Panel - Detect

Vince products was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Vince products was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Vince Login Panel - Detect', 'description': 'Vince products was...

IceWarp - Open Redirect Detection

IceWarp open redirect vulnerabilities were detected. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """IceWarp open redirect vulnerabilities were...

Symmetricom SyncServer Unauthenticated - Remote Command Execution Detection

Microchip Technology Microsemi SyncServer S650 was discovered to contain a command injection vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """Microchip Technology Microsemi SyncServer S650 was discovered to contain a command injection vulnerability.""" import re from kittysploit import...