WordPress Memphis Document Library 3.1.5 - Local File Inclusion Detection

WordPress Memphis Document Library 3.1.5 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Memphis Document Library 3.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Apereo CAS Cross-Site Scripting Detection

Apereo CAS through 6.4.1 allows cross-site scripting via POST requests sent to the REST API endpoints. !/usr/bin/env python3 -- coding: utf-8 -- """Apereo CAS through 6.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Eclipse Theia IDE Panel - Detect

Detected Eclipse Theia IDE panel was exposed. Theia is an extensible platform for multi-language Cloud and Desktop IDEs. Exposed panels may have allowed unauthenticated access to development environments and terminal. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Eclipse Theia IDE panel w...

Ace Admin Dashboard - Detect

Ace Admin dashboard page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ace Admin dashboard page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ace Admin Dashboard - Detect', 'description':...

Adapt Authoring Tool - Panel Detection

Login panel for adapt was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Login panel for adapt was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Adapt Authoring Tool - Panel Detection',...

Rustfs - Detect

Detects a Rustfs server, a high-performance, distributed object storage system built in Rust. !/usr/bin/env python3 -- coding: utf-8 -- """Detects a Rustfs server, a high-performance, distributed object storage system built in Rust.""" from kittysploit import from lib.protocols.http.httpclient...

XWiki < 4.10.20 - Remote code execution Detection

XWiki Platform is a generic wiki platform. Starting in version 2.4-milestone-1 and prior to versions 4.10.20, 15.5.4, and 15.10-rc-1, XWiki's database search allows remote code execution through the search text. This allows remote code execution for any visitor of a public wiki or user of a close...

Statamic - Detect

Statamic is the flat-first, Laravel + Git powered CMS designed for building beautiful, easy to manage websites. !/usr/bin/env python3 -- coding: utf-8 -- """Statamic is the flat-first, Laravel + Git powered CMS designed for building beautiful, easy to manage websites.""" import re from kittysploi...

Detect Gunicorn Server

Gunicorn Python WSGI HTTP Server for UNIX !/usr/bin/env python3 -- coding: utf-8 -- """Gunicorn Python WSGI HTTP Server for UNIX.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect Gunicorn Server',...

vRealize Log Insight - Panel Detect

Detect vRealize Log Insight login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Detect vRealize Log Insight login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'vRealize Log...

LM Studio Panel - Detect

LM Studio is a desktop application for discovering, downloading, and running local LLMs !/usr/bin/env python3 -- coding: utf-8 -- """LM Studio is a desktop application for discovering, downloading, and running local LLMs.""" from kittysploit import from lib.protocols.http.httpclient import...

WordPress SEO Tools Plugin 4.0.7 - Cross-Site Scripting Detection

The SEO Tools WordPress plugin through version 4.0.7 contains a reflected cross-site scripting vulnerability. The plugin does not properly sanitize and escape the 'src' parameter in the rssread.php file before outputting it back in the page, which could allow attackers to execute arbitrary...

Apache Airflow OS Command Injection Detection

Apache Airflow prior to version 2.2.4 is vulnerable to OS command injection attacks because some example DAGs do not properly sanitize user-provided parameters, making them susceptible to OS Command Injection from the web UI. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Airflow prior to...

Moxa MXview One - Network Management Panel Detection

Moxa MXview One is a network management platform for industrial Ethernet infrastructure, OT network monitoring, and topology visualisation. It is widely used in manufacturing, energy, and transportation to manage industrial switches and routers. !/usr/bin/env python3 -- coding: utf-8 -- """Moxa...

JumpServer - Open Redirect via Referer Header Detection

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to v3.10.19 and v4.10.5, The /core/i18n// endpoint uses the Referer header as the redirection target without proper validation, which could lead to an Open Redirect vulnerability. !/usr/bin/env...

SOUND4 Impact/Pulse/First/Eco <=2.x - Information Disclosure Detection

The application is vulnerable to sensitive directory indexing / information disclosure vulnerability. An unauthenticated attacker can visit the log directory and disclose the server's log files containing sensitive and system information. !/usr/bin/env python3 -- coding: utf-8 -- """The applicati...

CS-Cart - Local File Inclusion Detection

CS-Cart is vulnerable to local file inclusion because it allows remote unauthenticated attackers to access locally stored files and reveal their content. !/usr/bin/env python3 -- coding: utf-8 -- """CS-Cart is vulnerable to local file inclusion because it allows remote unauthenticated attackers t...

Host Header Injection Detection

HTTP header injection is a general class of web application security vulnerability which occurs when Hypertext Transfer Protocol headers are dynamically generated based on user input. !/usr/bin/env python3 -- coding: utf-8 -- """HTTP header injection is a general class of web application security...

MACH-ProWeb Login Panel - Detect

MACH-ProWeb login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """MACH-ProWeb login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MACH-ProWeb Login Panel - Detect', 'description...

Exposed Core Dump - File Disclosure Detection

Exposed Core Dump internal file is disclosed. !/usr/bin/env python3 -- coding: utf-8 -- """Exposed Core Dump internal file is disclosed.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Exposed Core Dump -...

XWiki Platform - Path Traversal Detection

XWiki Platform 4.2-milestone-2 through 16.10.6 contains a path traversal caused by improper access control in jsx and sx endpoints, letting remote attackers read configuration files, exploit requires no special privileges. !/usr/bin/env python3 -- coding: utf-8 -- """XWiki Platform 4.""" from...

Titan FTP Service - Detect

Titan FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Titan FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'Titan FTP Service - Detect',...

IIS-7 Default Page Detection

Detects IIS-7 Default Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects IIS-7 Default Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'IIS-7 Default Page Detection', 'description': 'Detects IIS-7 Defaul...

cPanel Backup Exclusion Configuration - Exposure Detection

cPanel backup exclusion configuration file cpbackup-exclude.conf was publicly accessible, potentially exposing directory structure and system paths. !/usr/bin/env python3 -- coding: utf-8 -- """cPanel backup exclusion configuration file cpbackup-exclude.""" from kittysploit import from...

CubeBackup Setup Page - Exposure Detection

Detects exposed CubeBackup Setup page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed CubeBackup Setup page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'CubeBackup Setup Page - Exposure Detection',...

Cacti - Guest User Access Enabled Detection

Cacti instance has guest user access enabled, allowing unauthenticated users to access graphview.php and potentially other resources. !/usr/bin/env python3 -- coding: utf-8 -- """Cacti instance has guest user access enabled, allowing unauthenticated users to access graphview.""" from kittysploit...

Rustici Content Controller Panel - Detect

Rustici Content Controller panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Rustici Content Controller panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Rustici Content Controller...

Phoronix Test Suite Panel - Detect

Phoronix Test Suite panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Phoronix Test Suite panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Phoronix Test Suite Panel -...

Dahua 'GetClassValue' - Remote Code Execution Detection

Remote Code Execution Vulnerability in Dahua Intelligent IoT Integrated Management Platform via GetClassValue.jsp. !/usr/bin/env python3 -- coding: utf-8 -- """Remote Code Execution Vulnerability in Dahua Intelligent IoT Integrated Management Platform via GetClassValue.""" import re from...

elFinder <=2.1.12 - Local File Inclusion Detection

elFinder through 2.1.12 is vulnerable to local file inclusion via Connector.minimal.php in std42. This allows unauthenticated remote attackers to read, write, and browse files outside the configured document root. This is due to improper handling of absolute file paths. !/usr/bin/env python3 --...

Encompass CM1 Home Page - Detect

Encompass CM1 home page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Encompass CM1 home page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Encompass CM1 Home Page - Detect', 'description...

OpenSpeedTest - Detect

Detected the exposed default page of the OpenSpeedTest service. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the exposed default page of the OpenSpeedTest service.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

IBM Decision Server Runtime Panel- Detect

IBM Decision Server Runtime was detected. !/usr/bin/env python3 -- coding: utf-8 -- """IBM Decision Server Runtime was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'IBM Decision Server Runtime Panel-...

CodeMeter - WebAdmin Panel Access Detection

CodeMeter WebAdmin panel was accessed. !/usr/bin/env python3 -- coding: utf-8 -- """CodeMeter WebAdmin panel was accessed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'CodeMeter - WebAdmin Panel Access Detection',...

vBulletin `Search.php` - SQL Injection Detection

vBulletin 4 is vulnerable to an SQL injection vulnerability, which may allow an attacker can execute malicious SQL statements that control a web application's database server. !/usr/bin/env python3 -- coding: utf-8 -- """vBulletin 4 is vulnerable to an SQL injection vulnerability, which may allow...

Lorex Panel - Detect

A lorex panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """A lorex panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Lorex Panel - Detect', 'description': 'A lorex panel was detected.'...

Wanhu OA download_old.jsp - Arbitrary File Read Detection

There is an arbitrary file download vulnerability in the Wanhu OA downloadold.jsp file. An attacker can download any file on the server through the vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """There is an arbitrary file download vulnerability in the Wanhu OA downloadold.""" from...

Dnsmasq Config - File Disclosure Detection

Dnsmasq Config file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Dnsmasq Config file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dnsmasq Config - File Disclosure Detection', 'description':...

OpenProject < 12.5.4 - Project Identifiers Exposure Detection

OpenProject versions before 12.5.6 generate a publicly accessible robots.txt file revealing project identifiers, even if the instance is set to 'Login required', letting attackers gather project info, exploit requires no authentication. !/usr/bin/env python3 -- coding: utf-8 -- """OpenProject...

AnythingLLM Panel Detection

Detects AnythingLLM personal LLM web interface. !/usr/bin/env python3 -- coding: utf-8 -- """Detect AnythingLLM panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "AnythingLLM Panel Detection", "description":...

Microsoft SharePoint - Site Metadata Disclosure Detection

Detected exposed SharePoint site metadata endpoints. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed SharePoint site metadata endpoints.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Microsoft...

Symfony Database Configuration File - Detect

Symfony database configuration file was detected and may contain database credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Symfony database configuration file was detected and may contain database credentials.""" from kittysploit import from lib.protocols.http.httpclient import Httpclien...

Mitel MiCollab - Arbitary File Read Detection

The Mitel Collab Arbitrary File Read vulnerability allows an unauthenticated attacker to read arbitrary files from the underlying file system on a Mitel Collab server. Exploiting this flaw involves sending specially crafted requests to the server, bypassing access controls and allowing the attack...

V2X Control - Dashboard Exposure Detection

V2X Control Dashboard is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """V2X Control Dashboard is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'V2X Control - Dashboard Exposure Detection',...

Apache Server Status Disclosure Detection

Apache /server-status displays information about your Apache status. If you are not using this feature, disable it. !/usr/bin/env python3 -- coding: utf-8 -- """Apache /server-status displays information about your Apache status.""" from kittysploit import from lib.protocols.http.httpclient impor...

Flir - Local File Inclusion Detection

Flir is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Flir is vulnerable to local file inclusion.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Flir - Local File Inclusi...

Cisco Unified CM Console - Panel Detection

Cisco Unified CM Console panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Cisco Unified CM Console panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cisco Unified CM Console -...

SAP Fiori Login Panel - Detect

SAP Fiori login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SAP Fiori login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SAP Fiori Login Panel - Detect', 'description': 'SA...

Pichome Login Panel - Detect

Pichome login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Pichome login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pichome Login Panel - Detect', 'description': 'Pichome...

Zimbra Detect

Send a GET request to js file on Zimbra server to obtain version information !/usr/bin/env python3 -- coding: utf-8 -- """Send a GET request to js file on Zimbra server to obtain version information.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...