MyStrom Panel - Detect

Mystrom panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Mystrom panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MyStrom Panel - Detect', 'description': 'Mystrom panel was...

librechat - Config Exposure Detection

Detected the /api/config endpoint of the LibreChat web application was publicly accessible, potentially exposing internal configuration details. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the /api/config endpoint of the LibreChat web application was publicly accessible, potentially...

Webmodule Login Panel - Detect

Webmodule login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Webmodule login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Webmodule Login Panel - Detect', 'description':...

Leantime - Detect

Detects a Leantime server, a project management system for non-project managers. !/usr/bin/env python3 -- coding: utf-8 -- """Detects a Leantime server, a project management system for non-project managers.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

WordPress Super Socializer <7.13.30 - Cross-Site Scripting Detection

WordPress Super Socializer plugin before 7.13.30 contains a reflected cross-site scripting vulnerability. It does not sanitize and escape the urls parameter in its thechampsharingcount AJAX action available to both unauthenticated and authenticated users before outputting it back in the response...

Laravel Debug Info Leak Detection

This template can be used to detect a Laravel debug information leak by making a POST-based request. !/usr/bin/env python3 -- coding: utf-8 -- """This template can be used to detect a Laravel debug information leak by making a POST-based request.""" from kittysploit import from...

Jeesns 1.4.2 - Cross-Site Scripting Detection

Jeesns 1.4.2 is vulnerable to reflected cross-site scripting that allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the system error message's text field. !/usr/bin/env python3 -- coding: utf-8 -- """Jeesns 1.""" from kittysploit import from...

UFIDA U8 CRM cfillbacksetting.php - SQL Injection Detection

UFIDA U8-CRM system /config/fillbacksetting.php contains an SQL injection vulnerability, which allows attackers to manipulate the database through maliciously constructed SQL statements, resulting in data leaks, tampering or destruction, and seriously threatening system security. !/usr/bin/env...

Kraken Cluster Monitoring Dashboard - Detect

Kraken Cluster Monitoring Dashboard was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Kraken Cluster Monitoring Dashboard was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kraken Cluster Monitori...

IBM API Connect Developer Portal - Detect

IBM API Connect Developer Portal was detected. !/usr/bin/env python3 -- coding: utf-8 -- """IBM API Connect Developer Portal was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.osint.faviconhash import shodanmmh3 class ModuleScanner, Httpclient:...

Manage Engine AD Search Detection

Manage Engine AD Manager service can be configured to allow anonymous users to browse the AD list remotely. !/usr/bin/env python3 -- coding: utf-8 -- """Manage Engine AD Manager service can be configured to allow anonymous users to browse the AD list remotely.""" from kittysploit import from...

Krayin CMS - Installer Detection

Krayin CRM installer page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Krayin CRM installer page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Krayin CMS - Installer Detection',...

LimeSurvey 4.1.11 - Local File Inclusion Detection

LimeSurvey before 4.1.12+200324 is vulnerable to local file inclusion because it contains a path traversal vulnerability in application/controllers/admin/LimeSurveyFileManager.php. !/usr/bin/env python3 -- coding: utf-8 -- """LimeSurvey before 4.""" import re from kittysploit import from...

Nextcloud Exposed Installation Detection

Nextcloud installation is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Nextcloud installation is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Nextcloud Exposed Installation Detection',...

Ruijie RG-NBS2009G-P - Improper Authentication Detection

An issue in Ruijie RG-NBS2009G-P RGOS v.10.41P2 Release9736 allows a remote attacker to gain privileges via the system/configmenu.htm. !/usr/bin/env python3 -- coding: utf-8 -- """An issue in Ruijie RG-NBS2009G-P RGOS v.""" from kittysploit import from lib.protocols.http.httpclient import...

PHPJabbers Cleaning Business 1.0 - Cross-Site Scripting Detection

The attacker can send to victim a link containing a malicious URL in an email or instant message can perform a wide variety of actions, such as stealing the victim's session token or login credentials. !/usr/bin/env python3 -- coding: utf-8 -- """The attacker can send to victim a link containing ...

Joomla! Component com_bfsurvey - Local File Inclusion Detection

A directory traversal vulnerability in the BF Survey combfsurvey component for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability i...

Pure-FTPd Service - Detect

Pure-FTPd FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Pure-FTPd FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'Pure-FTPd Service -...

Apache ActiveMQ Detection

Apache ActiveMQ is an open source message broker written in Java together with a full Java Message Service client. It provides "Enterprise Features" which in this case means fostering the communication from more than one client or server. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Active...

Zimbra Collaboration - Unrestricted File Upload Detection

An issue was discovered in Zimbra Collaboration ZCS 8.8.15 and 9.0. An attacker can upload arbitrary files through amavis via a cpio loophole extraction to /opt/zimbra/jetty/webapps/zimbra/public that can lead to incorrect access to any other user accounts. Zimbra recommends pax over cpio. Also,...

Bitbucket OAuth Credentials Exposure Detection

Detects exposed auth.json files containing Bitbucket OAuth credentials !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed auth.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Bitbucket OAuth...

Interlib - Local File Inclusion Detection

Interlib has an arbitrary file read vulnerability. Attackers can use the vulnerability to read any file. !/usr/bin/env python3 -- coding: utf-8 -- """Interlib has an arbitrary file read vulnerability.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Image Widget - Full Path Disclosure Detection

Image Widget WordPress plugin contains a full path disclosure vulnerability due to improper access restrictions in its source files, allowing unauthenticated attackers to retrieve full server paths and aiding exploitation. !/usr/bin/env python3 -- coding: utf-8 -- """Image Widget WordPress plugin...

Gitblit Login Panel - Detect

Gitblit login panel was detected — a pure Java stack for managing, viewing, and serving Git repositories. !/usr/bin/env python3 -- coding: utf-8 -- """Gitblit login panel was detected — a pure Java stack for managing, viewing, and serving Git repositories.""" from kittysploit import from...

YonBIP - Arbitrary File Read Detection

There is an arbitrary file reading vulnerability in yonbiplogin, the advanced version of YonBIP !/usr/bin/env python3 -- coding: utf-8 -- """There is an arbitrary file reading vulnerability in yonbiplogin, the advanced version of YonBIP.""" import re from kittysploit import from...

OA E-Weaver SptmForPortalThumbnail - Arbitrary File Read Detection

The controllable preview parameters of SptmForPortalThumbnail.jsp are not filtered and are directly spliced to the web root directory for file downloading. !/usr/bin/env python3 -- coding: utf-8 -- """The controllable preview parameters of SptmForPortalThumbnail.""" from kittysploit import from...

Dropbear sshd Detection

Dropbear is a software package written by Matt Johnston that provides a Secure Shell-compatible server and client. It is designed as a replacement for standard OpenSSH for environments with low memory and processor resources, such as embedded systems !/usr/bin/env python3 -- coding: utf-8 --...

Owncloud StatusPage detection

Detects Owncloud StatusPage detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Owncloud StatusPage detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Owncloud StatusPage detection', 'description'...

AnythingLLM - Information Disclosure Detection

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. If AnythingLLM prior to version 1.10.0 is configured to use Qdrant as the vector database with an API key, this QdrantApiKey could be exposed in plain text to unauthenticate...

ZOHO ManageEngine Exchange Reporter Plus Panel - Detect

ZOHO ManageEngine Exchange Reporter Plus panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ZOHO ManageEngine Exchange Reporter Plus panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Gridx 1.3 - Remote Code Execution Detection

Gridx 1.3 is susceptible to remote code execution via tests/support/stores/testgridfilter.php, which allows remote attackers to execute arbitrary code via crafted values submitted to the $query parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Gridx 1.""" from kittysploit import from...

BIZZY Login - Panel Detection

BIZZY login Panel was detected. BIZZY is a vulnerability management platform. !/usr/bin/env python3 -- coding: utf-8 -- """BIZZY login Panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'BIZZY Login -...

Python Django Admin Login Panel - Detect

Python Django admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Python Django admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Python Django Admin Login Panel...

SumoWebTools Installer Exposure Detection

SumoWebTools is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """SumoWebTools is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclien...

Detect Haproxy Exporter

Haproxy metrics is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Haproxy metrics is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect Haproxy Exporter', 'description': 'Haproxy metrics is...

Oracle Integrated Lights Out Manager Login Panel - Detect

Oracle Integrated Lights Out Manager login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Oracle Integrated Lights Out Manager login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name'...

Raritan PDU - Login Panel Detection

Raritan intelligent PDU web interface panel has been detected. !/usr/bin/env python3 -- coding: utf-8 -- """Raritan intelligent PDU web interface panel has been detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name'...

Springboot Liquidbase API Detection

This liquibase endpoint provides information about database changes !/usr/bin/env python3 -- coding: utf-8 -- """This liquibase endpoint provides information about database changes.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: in...

React / Node Dotenv File Exposure Detection

Checks for publicly readable .env / .env.local / .env.production files that often leak REACTAPP / VITE secrets on misconfigured SPA hosts. !/usr/bin/env python3 -- coding: utf-8 -- """Detect exposed .env files on React / Vite / Node SPA deployments.""" from kittysploit import from...

Thinfinity VirtualUI User Enumeration Detection

Thinfinity VirtualUI before v3.0, /changePassword returns different responses for requests depending on whether the username exists. It may enumerate OS users Administrator, Guest, etc. !/usr/bin/env python3 -- coding: utf-8 -- """Thinfinity VirtualUI before v3.""" import re from kittysploit impo...

Codeception YAML Configuration File - Detect

Codeception YAML configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Codeception YAML configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Codeception YAML...

Advantech R-SeeNet 2.4.12 - Cross-Site Scripting Detection

Advantech R-SeeNet 2.4.12 contains a reflected cross-site scripting vulnerability in the sshform.php script functionality. !/usr/bin/env python3 -- coding: utf-8 -- """Advantech R-SeeNet 2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Apache License File Detection

Apache License file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Apache License file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache License File Detection', 'description': 'Apache...

Grafana 8.0.0 <= v.8.2.2 - Angularjs Rendering Cross-Site Scripting Detection

Grafana is an open-source platform for monitoring and observability. In affected versions if an attacker is able to convince a victim to visit a URL referencing a vulnerable page, arbitrary JavaScript content may be executed within the context of the victim's browser. The user visiting the...

Advantech R-SeeNet - Cross-Site Scripting Detection

Advantech R-SeeNet is vulnerable to cross-site scripting via the devicegraphpage.php script via the is2sim parameter. A specially crafted URL by an attacker and visited by a victim can lead to arbitrary JavaScript code execution. !/usr/bin/env python3 -- coding: utf-8 -- """Advantech R-SeeNet is...

WordPress Brandfolder - Open Redirect (RFI & LFI) Detection

WordPress Brandfolder is vulnerable to remote/local file inclusion and allows remote attackers to inject an arbitrary URL into the 'callback.php' endpoint via the 'wpabspath' parameter which will redirect the victim to it. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Brandfolder is...

hanwang-detect

Detects hanwang-detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects hanwang-detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'hanwang-detect', 'description': 'Detects hanwang-detect.', 'author':...

IBM Eclipse Help System - Cross-Site Scripting Detection

IBM Eclipse Help System 6.1.0 through 6.1.0.6, 6.1.5 through 6.1.5.3, 7.0 through 7.0.0.2, and 8.0 prior to 8.0.0.1 contains a cross-site scripting vulnerability. An attacker can execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. !/usr/bin/env...

Artifactory anonymous deploy Detection

Artifactory anonymous repo is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Artifactory anonymous repo is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Artifactory anonymous deploy Detection',...

Lidarr Dashboard - Unauthenticated Detection

Exposed Lidarr was detected which can lead to sensitive information disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Exposed Lidarr was detected which can lead to sensitive information disclosure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...