CS-Cart - Local File Inclusion Detection

CS-Cart is vulnerable to local file inclusion because it allows remote unauthenticated attackers to access locally stored files and reveal their content. !/usr/bin/env python3 -- coding: utf-8 -- """CS-Cart is vulnerable to local file inclusion because it allows remote unauthenticated attackers t...

Accept Donations with PayPal <= 1.5.2 - Open Redirect Detection

The Accept Donations with PayPal & Stripe plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 1.5.2. This is due to insufficient validation on the redirect url supplied. This makes it possible for unauthenticated attackers to redirect users to potentially...

Oracle WebCenter Sites Detection

Detects Oracle WebCenter Sites. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Oracle WebCenter Sites.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Oracle WebCenter Sites Detection', 'description': 'Detects...

SeaweedFS Filer - Unauthenticated Access Detection

SeaweedFS Filer interface is exposed without authentication.Unauthenticated users may be able to upload, modify, or access files, potentially leading to malicious file hosting, data exposure, or remote compromise. !/usr/bin/env python3 -- coding: utf-8 -- """SeaweedFS Filer interface is exposed...

DD-WRT Control Panel - Exposure Detection

The DD-WRT web interface was found exposed without proper access controls, potentially allowing unauthorized users to view. !/usr/bin/env python3 -- coding: utf-8 -- """The DD-WRT web interface was found exposed without proper access controls, potentially allowing unauthorized u.""" from...

Danswer Panel - Detect

Danswer panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Danswer panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Danswer Panel - Detect', 'description': 'Danswer panel was...

Axigen Mail Server Filename Directory Traversal Detection

Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote attackers to read or delete arbitrary files via a .. dot dot in the fileName parameter in a download action to source/loggin/pagelogdwnfile.hsp, or the fileName parameter in an edi...

SMF Installer Detection

SMF is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """SMF is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Magmi 0.7.22 - Cross-Site Scripting Detection

Magmi 0.7.22 contains a cross-site scripting vulnerability due to insufficient filtration of user-supplied data prefix passed to the magmi-git-master/magmi/web/ajaxgettime.php URL. !/usr/bin/env python3 -- coding: utf-8 -- """Magmi 0.""" from kittysploit import from lib.protocols.http.httpclient...

Visual Studio Code Settings - Credential Exposure Detection

Detected exposed Visual Studio Code configuration files that were accessible over HTTP, which could have led to credential leakage or sensitive workspace disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed Visual Studio Code configuration files that were accessible over HTTP...

MooSocial 3.1.8 - Cross-Site Scripting Detection

A reflected cross-site scripting XSS vulnerability exisits in multiple url of mooSocial v3.1.8 which allows attackers to steal user's session cookies and impersonate their account via a crafted URL. !/usr/bin/env python3 -- coding: utf-8 -- """A reflected cross-site scripting XSS vulnerability...

WordPress Oxygen-Theme - Local File Inclusion Detection

WordPress Oxygen-Theme has a local file inclusion vulnerability via the 'file' parameter of 'download.php'. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Oxygen-Theme has a local file inclusion vulnerability via the 'file' parameter of 'download.""" from kittysploit import from...

ZenML ZenML Server - Improper Authentication Detection

ZenML Server in the ZenML machine learning package before 0.46.7 for Python allows remote privilege escalation because the /api/v1/users/usernameorid/activate REST API endpoint allows access on the basis of a valid username along with a new password in the request body. !/usr/bin/env python3 --...

Adminer 4.6.2 - 5.4.1 Unauthenticated Persistent DoS Detection

Adminer = 5.4.1 contains a denial of service caused by lack of origin validation in version check endpoint, letting attackers trigger server errors via crafted POST requests, exploit requires no special privileges. !/usr/bin/env python3 -- coding: utf-8 -- """Adminer = 5.""" from kittysploit impo...

WordPress UpdraftPlus - Full Path Disclosure Detection

WordPress Plugin UpdraftPlus files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin UpdraftPlus files are publicly accessible without...

Dify Panel Detection

Detects Dify LLM application platform panels. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Dify LLM platform panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "Dify Panel Detection", "description": "Detect...

WordPress Canto Plugin <= 3.0.4 - File Inclusion Detection

Canto plugin for WordPress up to version 3.0.4 contains a remote file inclusion caused by the 'wpabspath' parameter, letting unauthenticated attackers include and execute arbitrary remote code if allowurlinclude is enabled, exploit requires allowurlinclude to be enabled. !/usr/bin/env python3 --...

Botpress Admin Panel - Detect

Botpress admin panel was detected. Botpress is an open-source conversational AI platform for building chatbots and virtual assistants. !/usr/bin/env python3 -- coding: utf-8 -- """Botpress admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

WordPress API Bearer Auth <20190907 - Cross-Site Scripting Detection

WordPress API Bearer Auth plugin before 20190907 contains a cross-site scripting vulnerability. The server parameter is not correctly filtered in swagger-config.yaml.php. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress API Bearer Auth plugin before 20190907 contains a cross-site scripting...

Mida eFramework <=2.9.0 - Remote Command Execution Detection

Mida eFramework through 2.9.0 allows an attacker to achieve remote code execution with administrative root privileges. No authentication is required. !/usr/bin/env python3 -- coding: utf-8 -- """Mida eFramework through 2.""" import re from kittysploit import from lib.protocols.http.httpclient...

Brother Printer Panel - Detect

Brother printer web interface and management panel was detected. This template identifies exposed Brother printer panels that may be accessible without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Brother printer web interface and management panel was detected.""" from kittysploit...

Barracuda SSL VPN Log In Detection

The Barracuda SSL VPN is an integrated hardware and software solution enabling secure, clientless remote access to internal network resources from any web browser. !/usr/bin/env python3 -- coding: utf-8 -- """The Barracuda SSL VPN is an integrated hardware and software solution enabling secure,...

PHPJabbers Fundraising Script v1.0 - Cross-Site Scripting Detection

PHPJabbers Fundraising Script v1.0 is vulnerable to Cross Site Scripting XSS via the "action" parameter of index.php. !/usr/bin/env python3 -- coding: utf-8 -- """PHPJabbers Fundraising Script v1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Ngrok Status Page Detection

Ngrok is a popular platform that provides secure tunnels to localhost, allowing users to expose a local web server to the internet.The Ngrok status page is a web page that provides real-time information about the health and performance of the Ngrok service. !/usr/bin/env python3 -- coding: utf-8 ...

Weaviate Console - Detect

Detected Weaviate Console interface. Weaviate was open-source vector database that stores data objects and vector embeddings for AI applications. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Weaviate Console interface.""" from kittysploit import from lib.protocols.http.httpclient import...

Detect PRTG

Monitor all the systems, devices, traffic, and applications in your IT infrastructure -- https://www.paessler.com/prtg !/usr/bin/env python3 -- coding: utf-8 -- """Monitor all the systems, devices, traffic, and applications in your IT infrastructure -- https://www.""" import re from kittysploit...

WordPress FastDup <= 2.1.9 Sensitive Information Exposure - Directory Listing Detection

FastDup WordPress plugin 2.2 contains a directory listing vulnerability caused by lack of access restrictions in sensitive directories, letting attackers view export files, exploit requires no authentication. !/usr/bin/env python3 -- coding: utf-8 -- """FastDup WordPress plugin 2.""" from...

Tianqing Info Leak Detection

Information exposed in Tianqing. !/usr/bin/env python3 -- coding: utf-8 -- """Information exposed in Tianqing.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tianqing Info Leak Detection', 'description': 'Informatio...

Apache OFBiz - XML External Entity Injection Detection

The /webtools/control/xmlrpc endpoint in OFBiz XML-RPC event handler is exposed to External Entity Injection by passing DOCTYPE declarations with executable payloads that discloses the contents of files in the filesystem. In addition, it can also be used to probe for open network ports, and figur...

Apigee Login Panel - Detect

Apigee login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Apigee login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apigee Login Panel - Detect', 'description': 'Apigee logi...

Mapproxy - Detect

Checks for a running MapProxy instance and obtain version number. Also checks if the demo page is enabled. MapProxy is an open source proxy for geospatial data. It caches, accelerates and transforms data from existing map services and serves any desktop or web GIS client. !/usr/bin/env python3 --...

Qualys Cloud Platform Login Panel - Detect

Qualys Cloud Platform login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Qualys Cloud Platform login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Qualys Cloud Platform Login...

Vendure - Arbitrary File Read Detection

Vendure is an open-source headless commerce platform. Prior to versions 3.0.5 and 2.3.3, a vulnerability in Vendure's asset server plugin allows an attacker to craft a request which is able to traverse the server file system and retrieve the contents of arbitrary files, including sensitive data...

Haproxy Config - File Disclosure Detection

Haproxy Config file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Haproxy Config file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Haproxy Config - File Disclosure Detection', 'description':...

Springboot Env Actuator - Detect

Sensitive environment variables may not be masked !/usr/bin/env python3 -- coding: utf-8 -- """Sensitive environment variables may not be masked.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.scanner.http.probeguard import validatespringjsonprobe from...

Yarn Lock File Disclosure Detection

The yarn.lock file stores the versions of each Yarn dependency installed. It's a lock file for package.json. !/usr/bin/env python3 -- coding: utf-8 -- """The yarn.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Yarn...

Riello Netman 204 - SQL Injection Detection

The three endpoints /cgi-bin/dbdatalogw.cgi, /cgi-bin/dbeventlogw.cgi, and /cgi-bin/dbmultimetrw.cgi are vulnerable to SQL injection without prior authentication. This enables an attacker to modify the collected log data in an arbitrary way. !/usr/bin/env python3 -- coding: utf-8 -- """The three...

Nimble Streamer <=3.5.4-9 - Local File Inclusion Detection

Nimble Streamer 3.0.2-2 through 3.5.4-9 is vulnerable to local file inclusion. An attacker can traverse the file system to access files or directories that are outside of the restricted directory on the remote server. !/usr/bin/env python3 -- coding: utf-8 -- """Nimble Streamer 3.""" import re fr...

SeedDMS Login Panel - Detect

SeedDMS login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SeedDMS login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SeedDMS Login Panel - Detect', 'description': 'SeedDMS...

TOTVS Fluig Platform - Cross-Site Scripting Detection

A vulnerability was found in TOTVS Fluig Platform 1.6.x/1.7.x/1.8.0/1.8.1. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /mobileredir/openApp.jsp of the component mobileredir. The manipulation of the argument redirectUrl/user with the input...

Tenda 11n Wireless Router - Admin Panel Detection

The administrative panel for a Tenda Technology 11n Wireless Router was found. !/usr/bin/env python3 -- coding: utf-8 -- """The administrative panel for a Tenda Technology 11n Wireless Router was found.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

OAuth 2.0 Authorization Server Detection Template

Try to detect OAuth 2.0 Authorization Server via the "oauth/token" endpoint !/usr/bin/env python3 -- coding: utf-8 -- """Try to detect OAuth 2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OAuth 2.0 Authorization...

Cargo Lock Packages Disclosure Detection

Detects Cargo Lock Packages Disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Cargo Lock Packages Disclosure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cargo Lock Packages Disclosure Detection',...

Zenphoto <1.5 Installer - Detect

Zenphoto setup page before version 1.5 is susceptible to sensitive information disclosure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Zenphoto setup page before version 1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner...

Rapid7 Nexpose VM Security Console - Detect

Rapid7 Nexpose VM Security Console login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Rapid7 Nexpose VM Security Console login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Pritunl - Panel Detection

Realtime website and application monitoring tool !/usr/bin/env python3 -- coding: utf-8 -- """Realtime website and application monitoring tool.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pritunl - Panel...

Various Online Devices Detection (Network Camera)

Network camera panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Network camera panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Various Online Devices Detection Network Camera',...

Netdata Dashboard Panel - Detect

Netdata Dashboard panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Netdata Dashboard panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Netdata Dashboard Panel - Detect', 'description...

PowerLogic ION Panel - Detect

PowerLogic ION panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """PowerLogic ION panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PowerLogic ION Panel - Detect', 'description':...

WordPress Aspose Importer & Exporter 1.0 - Local File Inclusion Detection

WordPress Aspose Importer & Exporter version 1.0 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Aspose Importer & Exporter version 1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: inf...