Jan AI - Detect

Detects the Jan AI local server, an open-source ChatGPT alternative that runs models locally and exposes a Cortex-powered, OpenAI-compatible API default port 1337. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the Jan AI local server, an open-source ChatGPT alternative that runs models...

Guardfile Config - Detect

Guardfile configuration information was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Guardfile configuration information was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Guardfile Config -...

Interswitch Webpay - Credentials Exposure Detection

Exposure of Interswitch Webpay product IDs, MAC keys and access tokens. !/usr/bin/env python3 -- coding: utf-8 -- """Exposure of Interswitch Webpay product IDs, MAC keys and access tokens.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanne...

Notion Detect

Detects Notion Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Notion Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Notion Detect', 'description': 'Detects Notion Detect.', 'author': 'KittySplo...

Graphql Gqlgen Detect

Detects Graphql Gqlgen Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Graphql Gqlgen Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Graphql Gqlgen Detect', 'description': 'Detects Graphql Gqlge...

Blesta Installer Exposure Detection

Blesta is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Blesta is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Artica Pandora FMS <=7.42 - Arbitrary File Read Detection

Artica Pandora FMS through 7.42 is susceptible to arbitrary file read. An attacker can read the chat history, which is in JSON format and contains user names, user IDs, private messages, and timestamps. This can potentially lead to unauthorized data modification and other operations. !/usr/bin/en...

Hydra Router Dashboard - Detect

Hydra router dashboard was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Hydra router dashboard was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Hydra Router Dashboard - Detect', 'description':...

ThinkPHP 5.0.24 - Information Disclosure Detection

ThinkPHP 5.0.24 is susceptible to information disclosure. This version was configured without the PATHINFO parameter. This can allow an attacker to access all system environment parameters from index.php, thereby possibly obtaining sensitive information, modifying data, and/or executing...

Barco Control Room Management Suite <=2.9 Build 0275 - Local File Inclusion Detection

Barco Control Room Management through Suite 2.9 Build 0275 is vulnerable to local file inclusion that could allow attackers to access sensitive information and components. Requests must begin with the "GET /...." substring. !/usr/bin/env python3 -- coding: utf-8 -- """Barco Control Room Managemen...

Budibase - Admin Installer Detection

Detected Budibase admin setup checklist endpoint was publicly accessible with no admin user created, allowing unauthenticated users to complete setup and gain full platform control. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Budibase admin setup checklist endpoint was publicly accessib...

Ollama - Improper Authorization Detection

Detected an exposed Ollama API without proper authorization, allowing unauthorized access to AI models and operations. !/usr/bin/env python3 -- coding: utf-8 -- """Detected an exposed Ollama API without proper authorization, allowing unauthorized access to AI models and ope.""" from kittysploit...

Graphql Java Detect

Detects Graphql Java Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Graphql Java Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Graphql Java Detect', 'description': 'Detects Graphql Java...

Code42 Panel - Detect

Code42 panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Code42 panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Code42 Panel - Detect', 'description': 'Code42 panel was detected.',...

Glances Unauthenticated Panel Detection

Glance running web server mode & Unauthenticated leads system monitoring to info disclosure !/usr/bin/env python3 -- coding: utf-8 -- """Glance running web server mode & Unauthenticated leads system monitoring to info disclosure.""" from kittysploit import from lib.protocols.http.httpclient impor...

Fortinet FortiDDoS Panel Detection

Fortinet FortiDDoS panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Fortinet FortiDDoS panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Fortinet FortiDDoS Panel Detection',...

Wanhu OA smartUpload.jsp - Arbitrary File Upload Detection

Wanhu OA smartUpload.jsp file has a file upload interface and does not filter file types, resulting in arbitrary file upload vulnerabilities. Malicious JSP files can be uploaded directly. !/usr/bin/env python3 -- coding: utf-8 -- """Wanhu OA smartUpload.""" from kittysploit import from...

Genie Access WIP3BVAF IP Camera - Local File Inclusion Detection

Genie Access WIP3BVAF WISH IP 3MP IR Auto Focus Bullet Camera devices through 3.X are vulnerable to local file inclusion via the web interface, as demonstrated by reading /etc/shadow. !/usr/bin/env python3 -- coding: utf-8 -- """Genie Access WIP3BVAF WISH IP 3MP IR Auto Focus Bullet Camera device...

WordPress HC Custom WP-Admin URL <=1.4 - Admin Login URL Disclosure Detection

The HC Custom WP-Admin URL WordPress plugin through 1.4 leaks the secret login URL when sending a specific crafted request !/usr/bin/env python3 -- coding: utf-8 -- """The HC Custom WP-Admin URL WordPress plugin through 1.""" import re from kittysploit import from lib.protocols.http.httpclient...

Dash Panel Detect

Detects Dash Panel Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Dash Panel Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dash Panel Detect', 'description': 'Detects Dash Panel Detect.',...

Open edX <2022-06-06 - Cross-Site Scripting Detection

Open edX before 2022-06-06 contains a reflected cross-site scripting vulnerability via the 'next' parameter in the logout URL. !/usr/bin/env python3 -- coding: utf-8 -- """Open edX before 2022-06-06 contains a reflected cross-site scripting vulnerability via the 'next' parameter in.""" from...

ACME Challenge Path - Reflected Cross-Site Scripting Detection

Detects XSS vulnerabilities in ACME http-01 challenge implementations where hosting providers reflect the challenge key from the URL without proper sanitization !/usr/bin/env python3 -- coding: utf-8 -- """Detects XSS vulnerabilities in ACME http-01 challenge implementations where hosting provide...

Cisco Adaptive Security Appliance Software/Cisco Firepower Threat Defense - Directory Traversal Detection

Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software are susceptible to directory traversal vulnerabilities that could allow an unauthenticated, remote attacker to obtain read and delete access to sensitive files on a targeted system. !/usr/bin/env python...

IBM Decision Server Runtime Panel- Detect

IBM Decision Server Runtime was detected. !/usr/bin/env python3 -- coding: utf-8 -- """IBM Decision Server Runtime was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'IBM Decision Server Runtime Panel-...

DzzOffice - Installer Page Exposure Detection

Detects exposed DzzOffice Installation page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed DzzOffice Installation page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'DzzOffice - Installer Page Exposu...

Atlassian Confluence CVE-2023-22515 Detection

Detects CVE-2023-22515 by verifying that setupComplete can be toggled to re-expose the administrator setup form no account creation. !/usr/bin/env python3 -- coding: utf-8 -- """Atlassian Confluence CVE-2023-22515 broken access control / setup reset detection.""" from kittysploit import from...

CheckPoint SSL Network Extender Login Panel - Detect

CheckPoint SSL Network Extender login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """CheckPoint SSL Network Extender login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

WordPress Aspose PDF Exporter - Local File Inclusion Detection

WordPress Aspose PDF Exporter is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Aspose PDF Exporter is vulnerable to local file inclusion.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

Sonicwall - Pre-Authentication Arbitrary File Read Detection

Improper escaping of output in modrewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting in code execution or source code disclosure...

WP Helper Lite < 4.3 - Cross-Site Scripting Detection

The WP Helper Lite WordPress plugin, in versions 4.3, returns all GET parameters unsanitized in the response, resulting in a reflected cross-site scripting vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """The WP Helper Lite WordPress plugin, in versions 4.""" from kittysploit import fr...

Franklin Fueling Systems Colibri Controller Module 1.8.19.8580 - Local File Inclusion Detection

Franklin Fueling Systems Colibri Controller Module 1.8.19.8580 is susceptible to local file inclusion because of insecure handling of a download function that leads to disclosure of internal files due to path traversal with root privileges. !/usr/bin/env python3 -- coding: utf-8 -- """Franklin...

WordPress e-search <=1.0 - Cross-Site Scripting Detection

Wordpress plugin e-search 1.0 and before contains a cross-site scripting vulnerability via dateselect.php which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...

Aruba VIA VPN - Login Panel Detection

Aruba VIA Virtual Intranet Access is HPE Aruba's SSL VPN client and gateway solution. The web management portal exposes a login interface typically on port 4343. !/usr/bin/env python3 -- coding: utf-8 -- """Aruba VIA Virtual Intranet Access is HPE Aruba's SSL VPN client and gateway solution."""...

WordPress AcyMailing <7.5.0 - Open Redirect Detection

WordPress AcyMailing plugin before 7.5.0 contains an open redirect vulnerability due to improper sanitization of the redirect parameter. An attacker turning the request from POST to GET can craft a link containing a potentially malicious landing page and send it to the user. !/usr/bin/env python3...

vRealize Operations Manager API - Server-Side Request Forgery Detection

vRealize Operations Manager API is susceptible to server-side request forgery. A malicious actor with network access to the vRealize Operations Manager API can steal administrative credentials or trigger remote code execution using CVE-2021-21983. !/usr/bin/env python3 -- coding: utf-8 --...

DotNetNuke 9.2 - 9.2.1 - Weak Encryption & Cookie Deserialization Detection

DNN DotNetNuke versions 9.2 through 9.2.1 use a weak encryption algorithm to protect input parameters. This cryptographic weakness enables attackers to craft malicious DNNPersonalization cookies that can be deserialized, leading to remote code execution. !/usr/bin/env python3 -- coding: utf-8 --...

Apache HTTP Server End-of-Life - Detect

Detected Apache HTTP Server versions that have reached End-of-Life EOL and no longer receive security updates. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Apache HTTP Server versions that have reached End-of-Life EOL and no longer receive security update.""" from kittysploit import from...

OA E-Office officeserver.php Arbitrary File Read Detection

There is an arbitrary file reading vulnerability in the OA E-Office officeserver.php file. An attacker can download any file on the server through the vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """There is an arbitrary file reading vulnerability in the OA E-Office officeserver."""...

SkyCaiji - Exposed Installation Detection

SkyCaiji was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """SkyCaiji was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SkyCaiji - Exposed Installation Detection', 'description': 'SkyCaiji was...

Postgres Exporter Metrics Detection

Postgres Exporter Metrics is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Postgres Exporter Metrics is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Postgres Exporter Metrics Detection',...

SEH utnserver Pro/ProMAX/INU-100 20.1.22 - File Exposure Detection

A vulnerability was identified in utnserver Pro, utnserver ProMAX, and INU-100 version 20.1.22 and earlier, impacting the file handling functions. This flaw results in authenticated file disclosure, granting unauthorized access to sensitive files and directories. Although authentication is...

Strapi API - Detect

Strapi API was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Strapi API was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Strapi API - Detect', 'description': 'Strapi API was detected.', 'author'...

2 Click Socialmedia Buttons < 0.34 - Cross-Site Scripting Detection

A cross-site scripting vulnerability in libs/xing.php in the 2 Click Social Media Buttons plugin before 0.34 for WordPress allows remote attackers to inject arbitrary web script or HTML via the xing-url parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting vulnerability i...

WordPress All in One SEO Pack - Full Path Disclosure Detection

All in One SEO Pack for WordPress contains a full path disclosure vulnerability due to improper access restrictions in its source files, allowing unauthenticated attackers to retrieve full server paths and aiding exploitation. !/usr/bin/env python3 -- coding: utf-8 -- """All in One SEO Pack for...

Flow Configuration - Exposure Detection

Detects an exposed Flow configuration file. These files may contain sensitive information such as credentials, internal endpoints, or environment settings. !/usr/bin/env python3 -- coding: utf-8 -- """Detects an exposed Flow configuration file.""" from kittysploit import from...

Ruijie NBR1300G Cli Password Leak - Detect

Ruijie NBR1300G CLI password leak vulnerability was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ruijie NBR1300G CLI password leak vulnerability was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

XDS-AMR Status Login Panel - Detect

XDS-AMR Status login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """XDS-AMR Status login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'XDS-AMR Status Login Panel - Detect',...

Alibaba Druid Panel - Detect

Alibaba Druid panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Alibaba Druid panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Alibaba Druid Panel - Detect', 'description': 'Alibaba...

XSpeeder Login - Detect

Detects the presence of XSpeeder router login panels. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of XSpeeder router login panels.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'XSpeeder Login ...

Metabase Installer - Exposure Detection

Detected Metabase installer page, allowing unauthorized database setup and configuration. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Metabase installer page, allowing unauthorized database setup and configuration.""" from kittysploit import from lib.protocols.http.httpclient import...