VMWare Workspace ONE UEM - Server-Side Request Forgery Detection

VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and 21.5.0 prior to 21.5.0.37 contain a server-side request forgery vulnerability. This issue may allow a malicious actor with network access to UEM to send their requests without...

OpenSNS - Remote Code Execution Detection

OpenSNS allows remote unauthenticated attackers to execute arbitrary code via the 'shareBox' endpoint. !/usr/bin/env python3 -- coding: utf-8 -- """OpenSNS allows remote unauthenticated attackers to execute arbitrary code via the 'shareBox' endpoint.""" import re from kittysploit import from...

Reolink E1 Zoom Camera <=3.0.0.716 - Information Disclosure Detection

Reolink E1 Zoom camera through 3.0.0.716 is susceptible to information disclosure. The web server discloses its configuration via the /conf/ directory that is mapped to a publicly accessible path. An attacker with network-level access to the camera can can download the entire NGINX/FastCGI...

WordPress Download Manager <= 3.2.59 - Reflected XSS Detection

W3 Eden, Inc. Download Manager plugin = 3.2.59 contains a reflected cross-site scripting caused by insufficient input sanitization, letting attackers execute scripts in the context of the victim's browser, exploit requires attacker to craft a malicious link. !/usr/bin/env python3 -- coding: utf-8...

NGINX Shards Disclosure Detection

NGINX internal information, shards page exposed. !/usr/bin/env python3 -- coding: utf-8 -- """NGINX internal information, shards page exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'NGINX Shards Disclosure...

AVCON6 org_execl_download.action - Arbitrary File Download Detection

Arbitrary File Download vulnerability in the orgexecldownload.action of the AVCON6 system management platform, through which an attacker can download arbitrary files from the server !/usr/bin/env python3 -- coding: utf-8 -- """Arbitrary File Download vulnerability in the orgexecldownload.""" impo...

SAUTER moduWeb Vision Panel - Detect

Sauter moduWeb Vision was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Sauter moduWeb Vision was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SAUTER moduWeb Vision Panel - Detect', 'description...

Wavlink WN-533A8 - Cross-Site Scripting Detection

Wavlink WN-533A8 M33A8.V5030.190716 contains a reflected cross-site scripting vulnerability via the loginpage parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Wavlink WN-533A8 M33A8.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

ExaGrid Manager Login Panel - Detect

ExaGrid Manager login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ExaGrid Manager login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ExaGrid Manager Login Panel - Detect',...

NUUO NVRmini 2 3.0.8 - Local File Inclusion Detection

NUUO NVRmini 2 3.0.8 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """NUUO NVRmini 2 3.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'NUUO NVRmini 2 3.0.8 - Local File Inclusion...

Software Publico Brasileiro i3geo v7.0.5 - Cross-Site Scripting Detection

Portal do Software Publico Brasileiro i3geo v7.0.5 was discovered to contain a cross-site scripting XSS vulnerability via requesttoken.php. !/usr/bin/env python3 -- coding: utf-8 -- """Portal do Software Publico Brasileiro i3geo v7.""" from kittysploit import from lib.protocols.http.httpclient...

WordPress FastDup <= 2.1.9 Sensitive Information Exposure - Directory Listing Detection

FastDup WordPress plugin 2.2 contains a directory listing vulnerability caused by lack of access restrictions in sensitive directories, letting attackers view export files, exploit requires no authentication. !/usr/bin/env python3 -- coding: utf-8 -- """FastDup WordPress plugin 2.""" from...

OCS Inventory Login Panel - Detect

OCS Inventory login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """OCS Inventory login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OCS Inventory Login Panel - Detect',...

Nagios Login Panel - Detect

Nagios login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Nagios login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Nagios Login Panel - Detect', 'description': 'Nagios logi...

ConnectWise Server Backup Manager SE Panel - Detect

ConnectWise Server Backup Manager SE login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ConnectWise Server Backup Manager SE login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name'...

Dgraph Ratel Dashboard Exposure Panel - Detect

Dgraph Ratel Dashboard Exposure panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Dgraph Ratel Dashboard Exposure panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dgraph Ratel...

Jira Unauthenticated Admin Projects Detection

Detects Jira Unauthenticated Admin Projects. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Jira Unauthenticated Admin Projects.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Jira Unauthenticated Admin Projec...

Liferay Portal & DXP - Cross-Site Scripting Detection

Liferay Portal 7.4.0 through 7.4.3.133 and Liferay DXP 2024.Q1.1 through 2025.Q1.4 contain a reflected XSS caused by improper sanitization in entrycoverimagecaption.jsp, letting remote non-authenticated attackers inject JavaScript. !/usr/bin/env python3 -- coding: utf-8 -- """Liferay Portal 7."""...

Drupal 7 Elfinder - Unauthenticated Connector Exposure Detection

Identifies Drupal sites with the elfinder library installed, which could be vulnerable to unrestricted file upload through the connector.php file.When this component is detected, the site may be vulnerable to remote code execution attacks via PHP file uploads.This template only detects the presen...

WordPress Supsystic Contact Form <1.7.15 - Cross-Site Scripting Detection

WordPress Supsystic Contact Form plugin before 1.7.15 contains a cross-site scripting vulnerability. It does not sanitize the tab parameter of its options page before outputting it in an attribute. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Supsystic Contact Form plugin before 1."""...

Exposed FileZilla Configuration File - Exposure Detection

Detected publicly accessible FileZilla client configuration files sitemanager.xml, recentservers.xml, filezilla.xml. !/usr/bin/env python3 -- coding: utf-8 -- """Detected publicly accessible FileZilla client configuration files sitemanager.""" from kittysploit import from...

Groupoffice 3.4.21 - Local File Inclusion Detection

Groupoffice 3.4.21 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Groupoffice 3.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Groupoffice 3.4.21 - Local File Inclusio...

Rallly Login - Panel Detect

Rallly login interface was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Rallly login interface was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Rallly Login - Panel Detect', 'description':...

HugeGraph - Detect

A huge graph technology was detected. !/usr/bin/env python3 -- coding: utf-8 -- """A huge graph technology was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HugeGraph - Detect', 'description': 'A huge gra...

HyperDX Panel - Detect

HyperDX panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """HyperDX panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HyperDX Panel - Detect', 'description': 'HyperDX panel was...

Ncast HD Intelligent Recording - Arbitrary File Reading Detection

Ncast HD intelligent recording and broadcasting system has an arbitrary file reading vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """Ncast HD intelligent recording and broadcasting system has an arbitrary file reading vulnerability.""" import re from kittysploit import from...

Ruckus Unleashed Exposed Installation Detection

Ruckus Unleashed is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Ruckus Unleashed is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import...

Paystack Secret/Live Key - Exposure Detection

Detected exposed Paystack secret keys test or live found in application source code, configuration files, or client-side assets. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed Paystack secret keys test or live found in application source code, configuration files, or.""" import re...

ForgeRock IG Login/Welcome Page - Detect

Detects ForgeRock Identity Gateway login or welcome page and extracts version number !/usr/bin/env python3 -- coding: utf-8 -- """Detects ForgeRock Identity Gateway login or welcome page and extracts version number.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Google Bucket detection

Detects Google Bucket detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Google Bucket detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Google Bucket detection', 'description': 'Detects Google...

WhoDB < 0.45.0 - Path Traversal Detection

WhoDB contains a path traversal caused by lack of validation when opening database files, letting unauthenticated attackers access arbitrary Sqlite3 databases on the host system, exploit requires attacker to manipulate database filename input. !/usr/bin/env python3 -- coding: utf-8 -- """WhoDB...

ZOHO ManageEngine APEX IT Help-Desk Panel - Detect

ZOHO MangageEngine APEX panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ZOHO MangageEngine APEX panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ZOHO ManageEngine APEX IT Help-Desk...

Kiwi TCMS Information Disclosure Detection

Internal info exposed in Kiwi TCMS. !/usr/bin/env python3 -- coding: utf-8 -- """Internal info exposed in Kiwi TCMS.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kiwi TCMS Information Disclosure Detection',...

SOGo Detect

This template will detect a running SOGo instance !/usr/bin/env python3 -- coding: utf-8 -- """This template will detect a running SOGo instance.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SOGo Detect',...

DreamBox Detect

Detects DreamBox Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects DreamBox Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'DreamBox Detect', 'description': 'Detects DreamBox Detect.', 'author':...

Seagate NAS Login - Detect

Seagate NAS - SEAGATE Login was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Seagate NAS - SEAGATE Login was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Seagate NAS Login - Detect',...

Detect Abyss Web Server

Detects Detect Abyss Web Server. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Detect Abyss Web Server.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect Abyss Web Server', 'description': 'Detects Detect...

GYRA Master Admin Login Panel - Detect

GYRA Master Admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """GYRA Master Admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GYRA Master Admin Login Panel -...

Cisco Unified Communications Manager - Detect

Detected the presence of the Cisco Unified Communications User Management portal. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the presence of the Cisco Unified Communications User Management portal.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Mega Wordpress Theme - Cross site scripting Detection

WordPress theme with a 'Mega-Theme' design is vulnerable to a reflected XSS attack through the '?s=' parameter. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress theme with a 'Mega-Theme' design is vulnerable to a reflected XSS attack through the '?s=' parameter.""" from kittysploit import...

YouSayToo auto-publishing 1.0 - Cross-Site Scripting Detection

A cross-site scripting vulnerability in yousaytoo.php in YouSayToo auto-publishing plugin 1.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the submit parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting vulnerability in yousaytoo."""...

CockroachDB Unauthenticated Console Exposure Detection

Unauthenticated access to the CockroachDB console allows viewing the cluster nodes and server version. !/usr/bin/env python3 -- coding: utf-8 -- """Unauthenticated access to the CockroachDB console allows viewing the cluster nodes and server version.""" from kittysploit import from...

Kargo Login Panel - Detect

Kargo login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Kargo login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kargo Login Panel - Detect', 'description': 'Kargo login...

Semi Arbitrary File Read in Dev Mode - Nuxt.js Detection

Arbitrary File Read in Dev Mode in Nuxt.js !/usr/bin/env python3 -- coding: utf-8 -- """Arbitrary File Read in Dev Mode in Nuxt.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Semi Arbitrary File Read in Dev Mode -...

HuangDou UTCMS V9 - OS Command Injection Detection

A vulnerability, which was classified as critical, has been found in HuangDou UTCMS V9. Affected by this issue is some unknown functionality of the file app/modules/ut-cac/admin/cli.php. The manipulation of the argument o leads to os command injection.The attack may be launched remotely. The...

MicroStrategy Instances Detection Template

Detect if MicroStrategy instances exist in your URLS !/usr/bin/env python3 -- coding: utf-8 -- """Detect if MicroStrategy instances exist in your URLS.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MicroStrategy...

FineCMS <=5.0.10 - Cross-Site Scripting Detection

FineCMS through 5.0.10 contains a cross-site scripting vulnerability in controllers/api.php via the function parameter in a c=api&m=data2 request. !/usr/bin/env python3 -- coding: utf-8 -- """FineCMS through 5.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Kae's File Manager Login Panel - Detect

Kae's File Manager login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Kae's File Manager login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': "Kae's File Manager Login Panel -...

Akkadian Provisioning Manager 4.50.02 - Sensitive Information Disclosure Detection

Akkadian Provisioning Manager 4.50.02 could allow viewing of sensitive information within the /pme subdirectories. !/usr/bin/env python3 -- coding: utf-8 -- """Akkadian Provisioning Manager 4.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Hotjar RUM - Detect

Detects Hotjar Web Analytics & Session Recording artifacts. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Hotjar Web Analytics & Session Recording artifacts.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...