Server Backup Manager SE Panel - Detect

Server Backup Manager SE login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Server Backup Manager SE login panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Server Back...

Elastic Cloud API Key Detection

Detects Elastic Cloud API keys used for programmatic access to the Elastic Cloud and serverless APIs. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Elastic Cloud API keys used for programmatic access to the Elastic Cloud and serverless APIs.""" import re from kittysploit import from...

Apache Ozone - Detect

Detects a Apache Ozone web application, a scalable, redundant, and distributed object store for Hadoop and Cloud-native environments. !/usr/bin/env python3 -- coding: utf-8 -- """Detects a Apache Ozone web application, a scalable, redundant, and distributed object store for Hadoop and Clo.""" fro...

Express Default Page Detection

Detects Express Default Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Express Default Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Express Default Page Detection', 'description': 'Detects Expres...

SPIP Porte Plume Plugin - Remote Code Execution Detection

The porteplume plugin used by SPIP before 4.30-alpha2, 4.2.13, and 4.1.16 is vulnerable to an arbitrary code execution vulnerability. A remote and unauthenticated attacker can execute arbitrary PHP as the SPIP user by sending a crafted HTTP request. !/usr/bin/env python3 -- coding: utf-8 -- """Th...

PHP-FPM Status Detection

Detects PHP-FPM Status. !/usr/bin/env python3 -- coding: utf-8 -- """Detects PHP-FPM Status.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PHP-FPM Status Detection', 'description': 'Detects PHP-FPM Status.',...

Secret Token Ruby - File Disclosure Detection

Ruby Secret token is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Ruby Secret token is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Secret Token Ruby - File Disclosure Detection', 'description':...

Kopano WebApp Login Panel - Detect

Kopano WebApp login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Kopano WebApp login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kopano WebApp Login Panel - Detect',...

Cloudflare Nginx Detect

Detects Cloudflare Nginx Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Cloudflare Nginx Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cloudflare Nginx Detect', 'description': 'Detects...

Skeepers Login Panel - Detect

Skeepers login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Skeepers login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Skeepers Login Panel - Detect', 'description':...

T-Up OpenFrame Detection

Detects T-Up OpenFrame. !/usr/bin/env python3 -- coding: utf-8 -- """Detects T-Up OpenFrame.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'T-Up OpenFrame Detection', 'description': 'Detects T-Up OpenFrame.',...

ZOHO ManageEngine OpManager Panel - Detect

ZOHO ManageEngine OpManager panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ZOHO ManageEngine OpManager panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ZOHO ManageEngine OpManager...

Jalios JCMS Login Panel - Detect

Jalios JCMS login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Jalios JCMS login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Jalios JCMS Login Panel - Detect', 'description...

WordPress PHPFreeChat 0.2.8 - Cross-Site Scripting Detection

WordPress PHPFreeChat 0.2.8 plugin contains a cross-site scripting vulnerability via the url parameter. An attacker can execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials...

Prometheus targets API endpoint Detection

The targets endpoint exposes services belonging to the infrastructure, including their roles and labels. In addition to showing the target machine addresses, the endpoint also exposes metadata labels that are added by the target provider. These labels are intended to contain non-sensitive values,...

COMMAX Smart Home Ruvie CCTV Bridge DVR - RTSP Credentials Disclosure Detection

The COMMAX CCTV Bridge for the DVR service allows an unauthenticated attacker to disclose real time streaming protocol RTSP credentials in plain-text. !/usr/bin/env python3 -- coding: utf-8 -- """The COMMAX CCTV Bridge for the DVR service allows an unauthenticated attacker to disclose real time...

Versa Networks Detection

Detects Versa Networks Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Versa Networks Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.osint.faviconhash import shodanmmh3 class ModuleScanner, Httpclient: info = 'name': 'Versa...

COMMAX Biometric Access Control System 1.0.0 - Authentication Bypass Detection

COMMAX Biometric Access Control System 1.0.0 suffers from an authentication bypass vulnerability. An unauthenticated attacker through cookie poisoning can bypass authentication and disclose sensitive information and circumvent physical controls in smart homes and buildings. !/usr/bin/env python3 ...

EasyImage down.php - Arbitrary File Read Detection

down.php file in EasyImage is vulnerable to arbitrary file read. !/usr/bin/env python3 -- coding: utf-8 -- """down.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'EasyImage down.php - Arbitrary File Read Detection',...

Alert Manager - Unauthenticated Access Detection

Alert Manager was able to be accessed with no authentication requirements in place. !/usr/bin/env python3 -- coding: utf-8 -- """Alert Manager was able to be accessed with no authentication requirements in place.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...

Snoop Servlet - Information Disclosure Detection

The Snoop Servlet returns information about the HTTP request itself and sometimes. It could help an attacker to prepare more advanced attacks. !/usr/bin/env python3 -- coding: utf-8 -- """The Snoop Servlet returns information about the HTTP request itself and sometimes.""" from kittysploit import...

Microsoft IIS version detect

Some Microsoft IIS servers have the version on the response header. Useful when you need to find specific CVEs on your targets. !/usr/bin/env python3 -- coding: utf-8 -- """Some Microsoft IIS servers have the version on the response header.""" from kittysploit import from...

Joomla! Component com_jashowcase - Directory Traversal Detection

A directory traversal vulnerability in the JA Showcase comjashowcase component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter in a jashowcase action to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal...

ECOA Building Automation System - Directory Traversal Content Disclosure Detection

The ECOA BAS controller suffers from a directory traversal content disclosure vulnerability. Using the GET parameter cpath in File Manager fmangersub, attackers can disclose directory content on the affected device !/usr/bin/env python3 -- coding: utf-8 -- """The ECOA BAS controller suffers from ...

SolarView Compact < 6.00 - Directory Traversal Detection

SolarView Compact before version 6.00 is vulnerable to directory traversal via the file parameter in downloader.php. An unauthenticated attacker can read arbitrary files from the system by using path traversal sequences with a null byte bypass to access sensitive files such as /etc/passwd...

WordPress Videos sync PDF <=1.7.4 - Local File Inclusion Detection

WordPress Videos sync PDF 1.7.4 and prior does not validate the p parameter before using it in an include statement, which could lead to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Videos sync PDF 1.""" from kittysploit import from lib.protocols.http.httpclient...

LobeHub LobeChat <= 2.1.56 - Server-Side Request Forgery Detection

LobeHub LobeChat versions up to and including 2.1.56 are vulnerable to an unauthenticated server-side request forgery vulnerability in the /webapi/proxy endpoint. The endpoint accepts a URL in the POST request body and fetches it server-side without authentication. !/usr/bin/env python3 -- coding...

ffay lanproxy Directory Traversal Detection

ffay lanproxy 0.1 is susceptible to a directory traversal vulnerability that could let attackers read /../conf/config.properties to obtain credentials for a connection to the intranet. !/usr/bin/env python3 -- coding: utf-8 -- """ffay lanproxy 0.""" from kittysploit import from...

Area Rat C2 - Detect

Ares is a Python Remote Access Tool. !/usr/bin/env python3 -- coding: utf-8 -- """Ares is a Python Remote Access Tool.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Area Rat C2 - Detect', 'description': 'Ares is a...

WordPress File Manager Plugin - Remote Code Execution Detection

The WordPress File Manager plugin prior to version 6.9 is susceptible to remote code execution. The vulnerability allows unauthenticated remote attackers to upload .php files. !/usr/bin/env python3 -- coding: utf-8 -- """The WordPress File Manager plugin prior to version 6.""" from kittysploit...

Huawei Firewall - Local File Inclusion Detection

USG9500 with versions of V500R001C30SPC100, V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, V500R005C00SPC100, V500R005C00SPC200 have an information leakage vulnerability. Due to improper processing of the initialization vector used in a specific encryption algorithm, an attacker who gai...

Webmin <= 1.920 - Unauthenticated Remote Command Execution Detection

Webmin =1.920. is vulnerable to an unauthenticated remote command execution via the parameter 'old' in passwordchange.cgi. !/usr/bin/env python3 -- coding: utf-8 -- """Webmin =1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

3CX Config - File Disclosure Detection

3CX Configuration file was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """3CX Configuration file was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': '3CX Config - File Disclosure Detection',...

WordPress Mail Masta 1.0 - Local File Inclusion Detection

WordPress Mail Masta 1.0 is susceptible to local file inclusion in countofsend.php and csvexport.php. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Mail Masta 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: inf...

IBM Maximo Asset Management Information Disclosure - XML External Entity Injection Detection

IBM Maximo Asset Management is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. !/usr/bin/env python3 -- coding: utf-8 -- """IBM Maximo Asset Manageme...

Oracle Fusion - Directory Traversal/Local File Inclusion Detection

Oracle Business Intelligence Enterprise Edition 5.5.0.0.0, 12.2.1.3.0, and 12.2.1.4.0 are vulnerable to local file inclusion vulnerabilities via "getPreviewImage." !/usr/bin/env python3 -- coding: utf-8 -- """Oracle Business Intelligence Enterprise Edition 5.""" import re from kittysploit import...

Joomla! Component MMS Blog 2.3.0 - Local File Inclusion Detection

A directory traversal vulnerability in the MMS Blog commmsblog component 2.3.0 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A director...

WP Helper Lite < 4.3 - Cross-Site Scripting Detection

The WP Helper Lite WordPress plugin, in versions 4.3, returns all GET parameters unsanitized in the response, resulting in a reflected cross-site scripting vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """The WP Helper Lite WordPress plugin, in versions 4.""" from kittysploit import fr...

IceWarp Mail Server ≤11.4.0 - Open Redirect Detection

IceWarp Mail Server version 11.4.0 and below contains an open redirect vulnerability that allows attackers to redirect users to arbitrary external domains through malicious URLs. !/usr/bin/env python3 -- coding: utf-8 -- """IceWarp Mail Server version 11.""" import re from kittysploit import from...

phpfastcache - phpinfo Resource Exposure Detection

phpinfo is susceptible to resource exposure in unprotected composer vendor folders via phpfastcache/phpfastcache. !/usr/bin/env python3 -- coding: utf-8 -- """phpinfo is susceptible to resource exposure in unprotected composer vendor folders via phpfastcache/phpfastc.""" from kittysploit import...

iTop Hub Connector - Information Disclosure Detection

Combodo iTop is a simple, web based IT Service Management tool. Server, OS, DBMS, PHP, and iTop info name, version and parameters can be read by anyone having access to iTop URI. This issue has been patched in versions 2.7.11, 3.0.5, 3.1.2, and 3.2.0. !/usr/bin/env python3 -- coding: utf-8 --...

DATAGERRY - Improper Access Control Detection

The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability. An attacker can remotely access this endpoint without authentication, leading to unauthorized disclosure of sensitive information. !/usr/bin/env python3 -- coding: utf-8 --...

ShokoServer System - Local File Inclusion (LFI) Detection

ShokoServer is a media server which specializes in organizing anime. In affected versions the /api/Image/WithPath endpoint is accessible without authentication and is supposed to return default server images. The endpoint accepts the parameter serverImagePath, which is not sanitized in any way...

WordPress Shareaholic <9.7.6 - Information Disclosure Detection

WordPress Shareaholic plugin prior to 9.7.6 is susceptible to information disclosure. The plugin does not have proper authorization check in one of the AJAX actions, available to both unauthenticated before 9.7.5 and authenticated in 9.7.5 users, allowing them to possibly obtain sensitive...

Rstudio Shiny Server <1.5.16 - Local File Inclusion Detection

Rstudio Shiny Server prior to 1.5.16 is vulnerable to local file inclusion and source code leakage. This can be exploited by appending an encoded slash to the URL. !/usr/bin/env python3 -- coding: utf-8 -- """Rstudio Shiny Server prior to 1.""" import re from kittysploit import from...

DotNetNuke 07.04.00 - Administration Authentication Bypass Detection

The installation wizard in DotNetNuke DNN before 7.4.1 allows remote attackers to reinstall the application and gain SuperUser access via a direct request to Install/InstallWizard.aspx. !/usr/bin/env python3 -- coding: utf-8 -- """The installation wizard in DotNetNuke DNN before 7.""" from...

Scrutinizer Config - Detect

Scrutinizer configuration information was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Scrutinizer configuration information was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Scrutinizer Config ...

AXIS Network Camera Live View - Detect

AXIS Network Camera live view was detected. !/usr/bin/env python3 -- coding: utf-8 -- """AXIS Network Camera live view was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.osint.faviconhash import shodanmmh3 class ModuleScanner, Httpclient: info =...

Automatisch Panel - Detect

The open source Zapier alternative. !/usr/bin/env python3 -- coding: utf-8 -- """The open source Zapier alternative.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Automatisch Panel - Detect', 'description': 'The op...

DSS Download - Local File Inclusion Detection

DSS Download is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """DSS Download is vulnerable to local file inclusion.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'DSS...