Dahua Intelligent IoT - Information Disclosure Detection

There is a vulnerability in the user login interface /evo-apigw/evo-oauth/oauth/token of Zhejiang Dahua Technology Co., Ltd. Intelligent IoT Integrated Management Platform. Users can successfully log in to the platform using justForTest/any password, causing information leakage. !/usr/bin/env...

Dahua Smart Park Management Platform - Arbitary File Read Detection

Dahua Smart Park Management Platform is vulnerable to Local File Inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Dahua Smart Park Management Platform is vulnerable to Local File Inclusion.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Darktrace Threat Visualizer Login Panel - Detect

Darktrace Threat Visualizer login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Darktrace Threat Visualizer login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Darktrace Threa...

Database Credentials File Exposure Detection

Internal file exposed containing database credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Internal file exposed containing database credentials.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Database...

Datadog Browser RUM - Detect

Detects Datadog Browser RUM Real User Monitoring SDK artifacts in HTML responses. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Datadog Browser RUM Real User Monitoring SDK artifacts in HTML responses.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Dataease - Default Login Detection

Dataease has a built-in account demo/dataease, and many developers forget to delete or change the account password. As a result, many Dataease can log in with this built-in account. !/usr/bin/env python3 -- coding: utf-8 -- """Dataease has a built-in account demo/dataease, and many developers...

Dataiku - Default Login Detection

Dataiku contains a default login vulnerability. An attacker can obtain access to user accounts and access sensitive information, modify data, and/or execute unauthorized operations. This vulnerability may also lead to server-side request forgery and/or remote code execution. !/usr/bin/env python3...

DaybydayCRM Login Panel - Detect

DaybydayCRM login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """DaybydayCRM login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'DaybydayCRM Login Panel - Detect', 'description...

DBeaver Database Connections - Detect

DBeaver database connections were detected. !/usr/bin/env python3 -- coding: utf-8 -- """DBeaver database connections were detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'DBeaver Database Connections -...

db.xml File - Detect

db.xml file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """db.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'db.xml File - Detect', 'description': 'db.xml file was detected.', 'author': 'KittySploit...

DD-WRT Control Panel - Exposure Detection

The DD-WRT web interface was found exposed without proper access controls, potentially allowing unauthorized users to view. !/usr/bin/env python3 -- coding: utf-8 -- """The DD-WRT web interface was found exposed without proper access controls, potentially allowing unauthorized u.""" from...

DedeCmsV5.6 Carbuyaction Fileinclude Detection

A vulnerability in DedeCMS's 'carbuyaction.php' endpoint allows remote attackers to return the content of locally stored files via a vulnerability in the 'code' parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A vulnerability in DedeCMS's 'carbuyaction.""" from kittysploit import from...

DedeCMS 5.7 - Cross-Site Scripting Detection

DeDeCMS 5.7 contains a cross-site scripting vulnerability in the '/include/dialog/config.php' file. An attacker can execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. !/usr/bin/env python3 -- coding: utf-8 -- """DeDeCMS 5.""" from kittysploit impo...

Deep Sea Electronics DSE 855 Generator Controller - Detect

Deep Sea Electronics DSE 855 is a generator/mains automatic transfer switch ATS controller with a built-in HTTP web server for remote monitoring and configuration of generator control systems. The interface is commonly exposed on port 8090 and requires no authentication by default. !/usr/bin/env...

Apache2 Default Test Page Detection

Detects Apache2 Default Test Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Apache2 Default Test Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache2 Default Test Page Detection', 'description':...

Apache2 Ubuntu Default Page Detection

Detects Apache2 Ubuntu Default Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Apache2 Ubuntu Default Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache2 Ubuntu Default Page Detection',...

Apache Shiro Default Page Detection

Detects Apache Shiro Default Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Apache Shiro Default Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Shiro Default Page Detection', 'description':...

ASP.Net Default Page Detection

Detected default ASP.NET application pages including both traditional and modern versions. !/usr/bin/env python3 -- coding: utf-8 -- """Detected default ASP.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ASP.Net...

Azure Function App - Default Page Detection

Detects Azure Function App - Default Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Azure Function App - Default Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Azure Function App - Default Page...

CakePHP Default Page Detection

Detects CakePHP Default Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects CakePHP Default Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'CakePHP Default Page Detection', 'description': 'Detects CakePH...

Django Default Page Detection

Detects Django Default Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Django Default Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Django Default Page Detection', 'description': 'Detects Django...

IIS-7 Default Page Detection

Detects IIS-7 Default Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects IIS-7 Default Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'IIS-7 Default Page Detection', 'description': 'Detects IIS-7 Defaul...

Jetty Default Page Detection

Detects Jetty Default Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Jetty Default Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Jetty Default Page Detection', 'description': 'Detects Jetty Defaul...

Nginx Default Test Page Detection

Detects Nginx Default Test Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Nginx Default Test Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Nginx Default Test Page Detection', 'description': 'Detec...

Oracle Application Server Containers Detection

Detects Oracle Application Server Containers. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Oracle Application Server Containers.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Oracle Application Server...

Azure Container Instance Default Page Detection

Detects Azure Container Instance Default Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Azure Container Instance Default Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Azure Container Instance...

Default Parallels Plesk Panel Page Detection

Detects Default Parallels Plesk Panel Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Default Parallels Plesk Panel Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Default Parallels Plesk Panel Page...

Red Hat Enterprise Linux Test Page Detection

Detects Red Hat Enterprise Linux Test Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Red Hat Enterprise Linux Test Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Red Hat Enterprise Linux Test Page...

Symfony Default Page Detection

Detects Symfony Default Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Symfony Default Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Symfony Default Page Detection', 'description': 'Detects Symfon...

Tengine Default Page Detection

Detects Tengine Default Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Tengine Default Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tengine Default Page Detection', 'description': 'Detects Tengin...

IIS Windows Server Default Page Detection

Detects IIS Windows Server Default Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects IIS Windows Server Default Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'IIS Windows Server Default Page Detection...

Detect Dell iDRAC9

The Integrated Dell Remote Access Controller iDRAC is designed for secure local and remote server management and helps IT administrators deploy, update and monitor Dell EMC PowerEdge servers. !/usr/bin/env python3 -- coding: utf-8 -- """The Integrated Dell Remote Access Controller iDRAC is design...

Dell Wyse Management Suite Login Panel - Detect

Dell Wyse Management Suite login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Dell Wyse Management Suite login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dell Wyse...

Deluge WebUI Login Panel - Detect

Deluge WebUI login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Deluge WebUI login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Deluge WebUI Login Panel - Detect',...

desktop.ini exposure Detection

Detects desktop.ini exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects desktop.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'desktop.ini exposure Detection', 'description': 'Detects desktop.ini...

Deskpro On-Premise Controller - Default Page Detect

Deskpro On-Premise Controller default page detected. !/usr/bin/env python3 -- coding: utf-8 -- """Deskpro On-Premise Controller default page detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Deskpro On-Premis...

Drone - Configuration Detection

Drone configuration was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Drone configuration was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Drone - Configuration Detection', 'description':...

Discover development log files Detection

Development log file was exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Development log file was exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Discover development log files Detection', 'description...

Dex Authentication - Panel Detection

Detects Dex Authentication - Panel. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Dex Authentication - Panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dex Authentication - Panel Detection', 'description...

Devtron JavaScript Environment Configuration - Exposure Detection

Devtron JavaScript environment configuration file was identified at /dashboard/env-config.js, exposing internal API endpoints and feature flag settings. !/usr/bin/env python3 -- coding: utf-8 -- """Devtron JavaScript environment configuration file was identified at /dashboard/env-config.""" from...

WordPress Diarise 1.5.9 - Arbitrary File Retrieval Detection

WordPress Diarise theme version 1.5.9 suffers from a local file retrieval vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Diarise theme version 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info ...

Dialogic XMS Admin Console - Detect

Detects Dialogic XMS Admin Console - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Dialogic XMS Admin Console - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dialogic XMS Admin Console -...

RackN Digital Rebar Login Panel - Detect

RackN Digital Rebar login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """RackN Digital Rebar login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'RackN Digital Rebar Login Panel...

Dify Panel Detection

Detects Dify LLM application platform panels. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Dify LLM platform panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "Dify Panel Detection", "description": "Detect...

Directum Login Panel - Detect

Directum login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Directum login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Directum Login Panel - Detect', 'description':...

Discourse Installer Exposure Detection

Discourse is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Discourse is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...

Divi Form Builder - Detect

Divi Form Builder is a premium WordPress form plugin by Divi Engine. !/usr/bin/env python3 -- coding: utf-8 -- """Divi Form Builder is a premium WordPress form plugin by Divi Engine.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

dizqueTV - Detect

An instance running dizqueTV was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An instance running dizqueTV was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'dizqueTV - Detect', 'description': 'A...

D-Link NAS `sc_mgr.cgi` - Remote Code Execution Detection

The D-Link NAS interface scmgr.cgi contains a command execution vulnerability that allows attackers to execute arbitrary commands on the device, potentially leading to unauthorized access or control over the system. !/usr/bin/env python3 -- coding: utf-8 -- """The D-Link NAS interface scmgr."""...

Docebo eLearning Login Panel - Detect

Docebo eLearning login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Docebo eLearning login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Docebo eLearning Login Panel - Detect...