Owncloud StatusPage detection

Detects Owncloud StatusPage detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Owncloud StatusPage detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Owncloud StatusPage detection', 'description'...

Wavlink WN-535G3 - Cross-Site Scripting Detection

Wavlink WN-535G3 contains a POST cross-site scripting vulnerability via the hostname parameter at /cgi-bin/login.cgi. !/usr/bin/env python3 -- coding: utf-8 -- """Wavlink WN-535G3 contains a POST cross-site scripting vulnerability via the hostname parameter at /cgi-bin/log.""" from kittysploit...

Ganglia Web Interface (v3.7.3 - v3.7.6) - Cross-Site Scripting Detection

A cross-site scripting XSS vulnerability in the component /master/header.php of Ganglia-web v3.73 to v3.76 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "tz" parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting XSS...

Tieline IP Audio Gateway <=2.6.4.8 - Unauthorized Remote Admin Panel Access Detection

Tieline IP Audio Gateway 2.6.4.8 and below is affected by a vulnerability in the web administrative interface that could allow an unauthenticated user to access a sensitive part of the system with a high privileged account. !/usr/bin/env python3 -- coding: utf-8 -- """Tieline IP Audio Gateway 2."...

Cedar Gate EZ-NET <= 6.8.0 - Cross-Site Scripting Detection

The Cedar Gate EZ-NET portal 6.5.5 6.8.0 Internet portal has a call to display messages to users which does not properly sanitize data sent in through a URL parameter. This leads to a Reflected Cross-Site Scripting vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """The Cedar Gate EZ-NET...

esm.sh <= v136 - Local File Inclusion Detection

esm.sh = 136 contains a local file inclusion caused by improper URL handling, letting attackers read arbitrary files from the host filesystem remotely, exploit requires crafted request. !/usr/bin/env python3 -- coding: utf-8 -- """esm.""" import re from kittysploit import from...

SqWebMail Login Panel - Detect

SqWebMail login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SqWebMail login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SqWebMail Login Panel - Detect', 'description':...

Apache Shenyu Gateway Management System - Detect

Detects a Apache Shenyu Gateway Management System, a Java native API Gateway for service proxy, protocol conversion and API governance. !/usr/bin/env python3 -- coding: utf-8 -- """Detects a Apache Shenyu Gateway Management System, a Java native API Gateway for service proxy, protocol conve."""...

LottieFiles WordPress Plugin <= 3.0.0 - Missing Authorization Detection

LottieFiles LottieFiles = 3.0.0 contains a broken access control vulnerability caused by incorrectly configured access control security levels, letting attackers exploit missing authorization, exploit requires no special privileges. !/usr/bin/env python3 -- coding: utf-8 -- """LottieFiles...

owncloud Config - Detect

owncloud configuration information was detected. !/usr/bin/env python3 -- coding: utf-8 -- """owncloud configuration information was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'owncloud Config - Detect'...

WordPress RobotCPA 5 - Directory Traversal Detection

The RobotCPA plugin 5 for WordPress has directory traversal via the f.php l parameter. !/usr/bin/env python3 -- coding: utf-8 -- """The RobotCPA plugin 5 for WordPress has directory traversal via the f.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...

Umbraco Install - Exposure Detection

Umbraco is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Umbraco is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Atom Synchronization Exposure Detection

It discloses username and password created by remote-sync for Atom, contains FTP and/or SCP/SFTP/SSH server details and credentials !/usr/bin/env python3 -- coding: utf-8 -- """It discloses username and password created by remote-sync for Atom, contains FTP and/or SCP/SFTP/SSH server de.""" from...

JavaScript Environment Configuration - Detect

Multiple common JavaScript environment configuration files were detected. !/usr/bin/env python3 -- coding: utf-8 -- """Multiple common JavaScript environment configuration files were detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Limesurvey Installer Exposure Detection

Limesurvey is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Limesurvey is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Groupoffice 3.4.21 - Local File Inclusion Detection

Groupoffice 3.4.21 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Groupoffice 3.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Groupoffice 3.4.21 - Local File Inclusio...

Zoho ManageEngine OpManager < 12.5.329 - Remote Code Execution Detection

Zoho ManageEngine OpManager before 12.5.329 contains a remote code execution caused by a general bypass in the deserialization class, letting unauthenticated attackers execute arbitrary code, exploit requires no authentication !/usr/bin/env python3 -- coding: utf-8 -- """Zoho ManageEngine OpManag...

Array VPN - Arbitrary File Reading Vulnerability Detection

Array VPN Arbitrary File Reading Vulnerability !/usr/bin/env python3 -- coding: utf-8 -- """Array VPN Arbitrary File Reading Vulnerability.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Array VPN -...

Magento Cacheleak Detection

Magento Cacheleak is an implementation vulnerability, result of bad implementation of web-server configuration for Magento platform. Magento was developed to work under the Apache web-server which natively works with .htaccess files, so all needed configuration directives specific for various...

ffay lanproxy Directory Traversal Detection

ffay lanproxy 0.1 is susceptible to a directory traversal vulnerability that could let attackers read /../conf/config.properties to obtain credentials for a connection to the intranet. !/usr/bin/env python3 -- coding: utf-8 -- """ffay lanproxy 0.""" from kittysploit import from...

WordPress MultiSafepay for WooCommerce <=4.13.1 - Arbitrary File Read Detection

WordPress MultiSafepay for WooCommerce plugin through 4.13.1 contains an arbitrary file read vulnerability. An attacker can potentially obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site. !/usr/bin/env python3 --...

WordPress Storefront Theme - Full Path Disclosure Detection

The Storefront theme for WordPress was detected to be vulnerable to Full Path Disclosure, allowing unauthenticated attackers to obtain the full application path that could aid other attacks when combined with another vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """The Storefront theme...

NGINX Shards Disclosure Detection

NGINX internal information, shards page exposed. !/usr/bin/env python3 -- coding: utf-8 -- """NGINX internal information, shards page exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'NGINX Shards Disclosure...

OX Appsuite - Cross-Site Scripting Detection

OX App Suite through 7.10.4 allows XSS via the app loading mechanism the PATHINFO to the /appsuite URI. !/usr/bin/env python3 -- coding: utf-8 -- """OX App Suite through 7.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

SAP NetWeaver ICM Info page leak Detection

Detection of SAP NetWeaver ABAP Webserver /public/info page !/usr/bin/env python3 -- coding: utf-8 -- """Detection of SAP NetWeaver ABAP Webserver /public/info page.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

SeaCMS V6.4.5 RCE Detection

A vulnerability in SeaCMS allows remote unauthenticated attackers to execute arbitrary PHP code. !/usr/bin/env python3 -- coding: utf-8 -- """A vulnerability in SeaCMS allows remote unauthenticated attackers to execute arbitrary PHP code.""" from kittysploit import from...

Redis Service - Detect

Redis service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Redis service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'Redis Service - Detect',...

CockroachDB Information Disclosure Detection

CockroachDB exposed the Statements Admin UI page and the HTTP endpoint /status/statements in ways that let non-admin users and in some builds, unauthenticated callers see SQL text executed across the cluster. !/usr/bin/env python3 -- coding: utf-8 -- """CockroachDB exposed the Statements Admin UI...

Movies <= 0.6 - Cross-Site Scripting Detection

A cross-site scripting vulnerability in the Movies plugin 0.6 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filename parameter to getid3/demos/demo.mimeonly.php. !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting vulnerability in...

Apple HttpServer Detect

Detects Apple HttpServer Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Apple HttpServer Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apple HttpServer Detect', 'description': 'Detects Apple...

Softneta MedDream PACS Server Premium 6.7.1.1 - Local File Inclusion Detection

Softneta MedDream PACS Server Premium 6.7.1.1 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Softneta MedDream PACS Server Premium 6.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name'...

Retool < 3.88 - SVG Cross-Site Scripting Detection

This template checks for SVG Cross-Site ScriptingXSS vulnerability via the Image Proxy URL parameter in Retool. !/usr/bin/env python3 -- coding: utf-8 -- """This template checks for SVG Cross-Site ScriptingXSS vulnerability via the Image Proxy URL parameter in Reto.""" from kittysploit import fro...

Springboot Actuator Metrics - Exposure Detection

Spring Boot Metrics Actuator endpoint was detected, which may expose system metrics information. This template detects both older Spring Boot 1.x format and newer 2.x/3.x format. !/usr/bin/env python3 -- coding: utf-8 -- """Spring Boot Metrics Actuator endpoint was detected, which may expose syst...

Gnuboard CMS - Detect

Gnuboard CMS was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Gnuboard CMS was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Gnuboard CMS - Detect', 'description': 'Gnuboard CMS was detected.',...

Cisco Secure Firewall Management Center - Panel Detection

Cisco Secure Firewall Management Center login panel was detected. Secure Firewall Management Center was formerly known as Firepower Management Center. !/usr/bin/env python3 -- coding: utf-8 -- """Cisco Secure Firewall Management Center login panel was detected.""" from kittysploit import from...

Safe Search Replace Exposure Detection

Safe Search Replace is exposed leaking internal info. !/usr/bin/env python3 -- coding: utf-8 -- """Safe Search Replace is exposed leaking internal info.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Safe Search...

Caobox CMS - Detect

Detects instances of Caobox CMS based on unique fingerprints and identifiers. !/usr/bin/env python3 -- coding: utf-8 -- """Detects instances of Caobox CMS based on unique fingerprints and identifiers.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

AVideo Installer - Detect

AVideo installer panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """AVideo installer panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AVideo Installer - Detect', 'description': 'AVide...

CMS Made Simple Installation Page - Exposure Detection

Detects exposed CMS Made Simple Installation page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed CMS Made Simple Installation page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'CMS Made Simple...

WordPress e-search <=1.0 - Cross-Site Scripting Detection

WordPress e-search 1.0 and before contains a reflected cross-site scripting vulnerability via titleaz.php which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...

Arize Phoenix - Detect

Arize Phoenix is an open-source AI observability and evaluation platform for monitoring, debugging, and evaluating LLM applications. !/usr/bin/env python3 -- coding: utf-8 -- """Arize Phoenix is an open-source AI observability and evaluation platform for monitoring, debugging, and evalua.""" from...

Check Point Mobile SSL VPN - Detect

Check Point Mobile SSL VPN was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Check Point Mobile SSL VPN was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Check Point Mobile SSL VPN - Detect',...

Caucho Resin LFR Detection

A vulnerability in Caucho Resin allows remote unauthenticated users to utilize the 'inputFile' variable to include the content of locally stored files and disclose their content. !/usr/bin/env python3 -- coding: utf-8 -- """A vulnerability in Caucho Resin allows remote unauthenticated users to...

Zoo Management System 1.0 - SQL Injection Detection

Zoo Management System 1.0 contains a SQL injection vulnerability via the username parameter on the login page. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. !/usr/bin/env...

Apache Gravitino - Detect

Detects a Apache Gravitino web application, world's most powerful open data catalog for building a high-performance, geo-distributed and federated metadata lake. !/usr/bin/env python3 -- coding: utf-8 -- """Detects a Apache Gravitino web application, world's most powerful open data catalog for...

RailsAdmin Dashboard Exposure Detection

Detected RailsAdmin dashboard was exposed without proper authentication, allowing unauthorized access to data management interface. !/usr/bin/env python3 -- coding: utf-8 -- """Detected RailsAdmin dashboard was exposed without proper authentication, allowing unauthorized access to data .""" from...

Springboot Actuator Caches Detection

The caches endpoint provides access to the application's caches. !/usr/bin/env python3 -- coding: utf-8 -- """The caches endpoint provides access to the application's caches.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

React CRA Asset Manifest Exposure Detection

Detects Create React App asset-manifest.json and similar build manifests that enumerate hashed bundles and help map the SPA attack surface. !/usr/bin/env python3 -- coding: utf-8 -- """Detect CRA asset-manifest.json / build metadata exposure.""" import json from kittysploit import from...

Bugzilla - Detect

Detects a Bugzilla server, official repository for the Bugzilla bug tracking system. !/usr/bin/env python3 -- coding: utf-8 -- """Detects a Bugzilla server, official repository for the Bugzilla bug tracking system.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Hookbot Rat Panel - Detect

Hookbot panel were detected. !/usr/bin/env python3 -- coding: utf-8 -- """Hookbot panel were detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Hookbot Rat Panel - Detect', 'description': 'Hookbot panel were...