JshERP Boot Panel - Detect

Detects JshERP Boot Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects JshERP Boot Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'JshERP Boot Panel - Detect', 'description': 'Detect...

default-wamp-server-page Detection

Wamp default page will expose sensitive configuration and vhosts. !/usr/bin/env python3 -- coding: utf-8 -- """Wamp default page will expose sensitive configuration and vhosts.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

WireGuard Easy (wg-easy) - Login Panel Detection

wg-easy is the easiest way to run WireGuard VPN with a web-based admin UI. It exposes a management interface for creating and managing WireGuard peers. !/usr/bin/env python3 -- coding: utf-8 -- """wg-easy is the easiest way to run WireGuard VPN with a web-based admin UI.""" from kittysploit impor...

PHP Proxy 3.0.3 - Local File Inclusion Detection

PHP Proxy 3.0.3 is susceptible to local file inclusion vulnerabilities that allow unauthenticated users to read files from the server via index.php?q=file:/// a different vulnerability than CVE-2018-19246. !/usr/bin/env python3 -- coding: utf-8 -- """PHP Proxy 3.""" import re from kittysploit...

Piwik Installer Exposure Detection

Piwik is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Piwik is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Xymon - Exposure Detection

Detected the exposure of the Xymon monitoring system interface. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the exposure of the Xymon monitoring system interface.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Utility Services Administration - Detect

Detects Utility Services Administration - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Utility Services Administration - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Utility Services...

SyncThru Web Service Panel - Detect

SyncThru Web Service panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SyncThru Web Service panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SyncThru Web Service Panel - Detect',...

Kube API Pods Detection

Scans for kube pods !/usr/bin/env python3 -- coding: utf-8 -- """Scans for kube pods.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kube API Pods Detection', 'description': 'Scans for kube pods', 'author':...

NS-ASG Application Security Gateway 6.3 - Sql Injection Detection

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. This affects an unknown part of the file /protocol/index.php. The manipulation of the argument IPAddr leads to sql injection. It is possible to initiate the attack remotely. The...

Phabricator Login Panel - Detect

Phabricator login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Phabricator login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Phabricator Login Panel - Detect', 'description...

Glances - Information Disclosure Detection

Glances 4.5.1 contains an information disclosure vulnerability caused by unfiltered exposure of sensitive configuration data via the /api/4/config REST API endpoint, letting remote attackers access credentials, exploit requires API access. !/usr/bin/env python3 -- coding: utf-8 -- """Glances 4.""...

Netmaker - Hardcoded DNS Secret Key Detection

Netmaker makes networks with WireGuard. Prior to versions 0.17.1 and 0.18.6, hardcoded DNS key usage has been found in Netmaker allowing unauth users to interact with DNS API endpoints. !/usr/bin/env python3 -- coding: utf-8 -- """Netmaker makes networks with WireGuard.""" from kittysploit import...

Symfony Profiler - Remote Access via Injected Arguments Detection

symfony/runtime is a module for the Symphony PHP framework which enables decoupling PHP applications from global state. When the registerargvargc php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment or debug mode used by...

Ruby Dragonfly <1.4.0 - Remote Code Execution Detection

Ruby Dragonfly before 1.4.0 contains an argument injection vulnerability that allows remote attackers to read and write to arbitrary files via a crafted URL when the verifyurl option is disabled. This may lead to code execution. The problem occurs because the generate and process features mishand...

Vue PACS - Panel Detection

Vue PACS was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Vue PACS was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Vue PACS - Panel Detection', 'description': 'Vue PACS was detected.', 'author...

pgAdmin 4 - Authentication Bypass Detection

pgAdmin 4 versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication. This vulnerability allows an attacker to potentially obtain the client ID and secret, leading to unauthorized access to user data. !/usr/bin/env python3 -- coding: utf-8 -- """pgAdmin 4 versions 8."""...

Mobile Management Platform Panel - Detect

Mobile Management Platform panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Mobile Management Platform panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Mobile Management Platform...

Watcher Panel - Detect

Detects Watcher Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Watcher Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Watcher Panel - Detect', 'description': 'Detects Watcher...

TOPdesk - Detect

Detects the use of TOPdesk, a web-based IT service management ITSM and helpdesk platform. Identification is based on unique page titles, HTML patterns. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the use of TOPdesk, a web-based IT service management ITSM and helpdesk platform.""" from...

Ruckus SmartZone Exposed Installation Detection

Ruckus SmartZone is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Ruckus SmartZone is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import...

Roundcube Webmail - Cross-Site Scripting Detection

A Cross-Site Scripting vulnerability in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to steal and send emails of a victim via a crafted e-mail message that abuses a Desanitization issue in messagebody in program/actions/mail/show.php. !/usr/bin/env python3 -- coding:...

Veriz0wn OSINT - Detect

Detects Veriz0wn OSINT - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Veriz0wn OSINT - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Veriz0wn OSINT - Detect', 'description': 'Detects Veriz0w...

Vite Dev Server - Information Exposure Detection

Vite dev server could allow reading files from the Vite project root by bypassing server.fs.deny with double forward-slash paths //. This affects exposed dev servers only. !/usr/bin/env python3 -- coding: utf-8 -- """Vite dev server could allow reading files from the Vite project root by bypassin...

Jeecg-Boot v3.5.1 - SQL Injection Detection

SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData in jeecg-boot v3.5.1. !/usr/bin/env python3 -- coding: utf-8 -- """SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData in jeecg-boot v3.""" from kittysploit import from...

phpwind Installer Exposure Detection

phpwind is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """phpwind is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Eclipse Jetty <9.2.9.v20150224 - Sensitive Information Leakage Detection

Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header. !/usr/bin/env python3 -- coding: utf-8 -- """Eclipse Jetty before 9.""" from kittysploit import from lib.protocols.http.httpclient import...

Tongda User Session Disclosure Detection

Tongda User session exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Tongda User session exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tongda User Session Disclosure Detection', 'description': 'Tongda...

Synway SMG Gateway 9-2radius.php - Remote Command Execution Detection

Synway SMG Gateway Management Software contains a remote command execution vulnerability in 9-2radius.php, where the radiusaddress parameter is passed to a system call without sanitization. This allows unauthenticated attackers to execute arbitrary commands on the server. !/usr/bin/env python3 --...

Eyou E-Mail <3.6 - Remote Code Execution Detection

Eyou Mail System before 3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter to admin/domain/iploginset/diploginget.php via the getloginipconfigfile function. !/usr/bin/env python3 -- coding: utf-8 -- """Eyou Mail System before 3.""" import re...

Django Debug Page - Cross-Site Scripting Detection

Django 1.10.x before 1.10.8 and 1.11.x before 1.11.5 has HTML autoescaping disabled in a portion of the template for the technical 500 debug page. We detected that right circumstances DEBUG=True are present to allow a cross-site scripting attack. !/usr/bin/env python3 -- coding: utf-8 -- """Djang...

Ray Static File - Local File Inclusion Detection

LFI in Ray's /static/ directory allows attackers to read any file on the server without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """LFI in Ray's /static/ directory allows attackers to read any file on the server without authentication.""" import re from kittysploit import from...

Huawei Router - Authentication Bypass Detection

Huawei Routers are vulnerable to authentication bypass because the default password of this router is the last 8 characters of the device's serial number which exist on the back of the device. !/usr/bin/env python3 -- coding: utf-8 -- """Huawei Routers are vulnerable to authentication bypass...

Selenium Grid Panel - Detect

Selenium Grid panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Selenium Grid panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Selenium Grid Panel - Detect', 'description': 'Selenium...

SolarWinds Serv-U 15.3 - Directory Traversal Detection

SolarWinds Serv-U 15.3 is susceptible to local file inclusion, which may allow an attacker access to installation and server files and also make it possible to obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site...

Homebridge - Unfinished Installation Detection

Homebridge instance with incomplete installation detected. The setup wizard is exposed, allowing anyone to create the first admin account and gain full control over the Homebridge instance. This can lead to unauthorized access to smart home devices and potential network compromise. !/usr/bin/env...

Cisco Meraki Cloud Security Appliance Panel - Detect

Cisco Meraki Cloud Security Appliance panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Cisco Meraki Cloud Security Appliance panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cisco...

VertiGIS - Detect

VertiGIS products was detected. !/usr/bin/env python3 -- coding: utf-8 -- """VertiGIS products was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'VertiGIS - Detect', 'description': 'VertiGIS products was...

Pair Drop Panel - Detect

Local file sharing in your browser. Inspired by Apple's AirDrop. Fork of Snapdrop. !/usr/bin/env python3 -- coding: utf-8 -- """Local file sharing in your browser.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pair...

PowerCom Network Manager Detection

Detects PowerCom Network Manager. !/usr/bin/env python3 -- coding: utf-8 -- """Detects PowerCom Network Manager.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PowerCom Network Manager Detection', 'description':...

AWStats Config - Detect

AWStats configuration information was detected. !/usr/bin/env python3 -- coding: utf-8 -- """AWStats configuration information was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AWStats Config - Detect',...

JetBrains TeamCity - Guest User Access Enabled Detection

TeamCity provides the ability to turn on the guest login allowing anonymous access to the TeamCity UI. !/usr/bin/env python3 -- coding: utf-8 -- """TeamCity provides the ability to turn on the guest login allowing anonymous access to the TeamCity UI.""" from kittysploit import from...

vBulletin - Full Path Disclosure Detection

Detects vBulletin - Full Path Disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects vBulletin - Full Path Disclosure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'vBulletin - Full Path Disclosure...

eMerge E3 1.00-06 - Local File Inclusion Detection

Linear eMerge E3-Series devices are vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Linear eMerge E3-Series devices are vulnerable to local file inclusion.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanne...

TCExam <= 14.8.1 - Sensitive Information Exposure Detection

When installed following the default/recommended settings, TCExam = 14.8.1 allowed unauthenticated users to access the /cache/backup/ directory, which includes sensitive database backup files. !/usr/bin/env python3 -- coding: utf-8 -- """When installed following the default/recommended settings,...

Atlassian Confluence <5.8.17 - Information Disclosure Detection

Atlassian Confluence before 5.8.17 contains an information disclsoure vulnerability. A remote authenticated user can read configuration files via the decoratorName parameter to 1 spaces/viewdefaultdecorator.action or 2 admin/viewdefaultdecorator.action. !/usr/bin/env python3 -- coding: utf-8 --...

Icecast Streaming Media Server Detection

Detects Icecast Streaming Media Server Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Icecast Streaming Media Server Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Icecast Streaming Media...

aaPanel Detection

Detects aaPanel Linux management panel login interface. !/usr/bin/env python3 -- coding: utf-8 -- """Detect aaPanel Linux management panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "aaPanel Detection",...

Alert Before Your Post <= 0.1.1 - Cross-Site Scripting Detection

A cross-site scripting vulnerability in postalert.php in Alert Before Your Post plugin, possibly 0.1.1 and earlier, for WordPress allows remote attackers to inject arbitrary web script or HTML via the name parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting vulnerabilit...

SearchBlox <9.2.2 - Local File Inclusion Detection

SearchBlox prior to version 9.2.2 is susceptible to local file inclusion in FileServlet that allows remote, unauthenticated users to read arbitrary files from the operating system via a /searchblox/servlet/FileServlet?col=url= request. Additionally, this may be used to read the contents of the...