Sophos Firewall Login Panel - Detect

Sophos Firewall login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Sophos Firewall login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sophos Firewall Login Panel - Detect',...

TIBCO Spotfire Statistics Services - Detect

TIBCO Spotfire Statistics Services was detected. !/usr/bin/env python3 -- coding: utf-8 -- """TIBCO Spotfire Statistics Services was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'TIBCO Spotfire Statistics...

Cisco Smart Install Endpoints Exposure Detection

Cisco Smart Install endpoints were discovered. Exposure of SMI to untrusted networks could allow complete compromise of the switch. !/usr/bin/env python3 -- coding: utf-8 -- """Cisco Smart Install endpoints were discovered.""" import socket from kittysploit import from...

Linksys Smart Wi-Fi Login Panel - Detect

Linksys Smart Wi-Fi login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Linksys Smart Wi-Fi login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Linksys Smart Wi-Fi Login Panel...

Fuji Xerox ApeosPort - Default Login Detection

This template checks for the default credentials username: 11111, password: x-admin on Fuji Xerox ApeosPort series printers. If the credentials are valid, the response will have a 200 HTTP status code. Tested on a Fuji Xerox ApeosPort-V C2275 T2. !/usr/bin/env python3 -- coding: utf-8 -- """This...

Linear eMerge E3-Series - Information Disclosure Detection

Linear eMerge E3-Series devices are susceptible to information disclosure. Admin credentials are stored in clear text at the endpoint /test.txt in situations where the default admin credentials have been changed. An attacker can obtain admin credentials, access the admin dashboard, control buildi...

User Control Panel - Detect

User Control Panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """User Control Panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'User Control Panel - Detect', 'description': 'User Contro...

WAGO Web based Management - Default Login Detection

Identified WAGO Web-Based Management interfaces that were accessible using default credentials admin:wago.These interfaces are used to configure and monitor WAGO programmable logic controllers PLCs and automation systems. Use of factory-default credentials exposed critical OT infrastructure to...

Heimdall Application Dashboard < 2.7.3 - Reflected XSS Detection

LinuxServer.io Heimdall 2.7.3 contains a stored XSS caused by improper sanitization of the "q" parameter, letting remote attackers execute scripts, exploit requires crafted input. !/usr/bin/env python3 -- coding: utf-8 -- """LinuxServer.""" from kittysploit import from...

Apache Guacamole Login Page and version detection

Detects Apache Guacamole Login Page and version detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Apache Guacamole Login Page and version detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apach...

Fortinet FortiSandbox Panel - Detect

Fortinet FortiSandbox login panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Fortinet FortiSandbox login panel was discovered.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Fortinet...

Optergy Proton/Enterprise Building Management System - Open Redirect Detection

Optergy Proton/Enterprise Building Management System contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """Optergy...

DataEase <= 2.4.1 - Sensitive Information Exposure Detection

DataEase, an open source data visualization and analysis tool, has a database configuration information exposure vulnerability prior to version 2.5.0. Visiting the /de2api/engine/getEngine;.js path via a browser reveals that the platform's database configuration is returned. !/usr/bin/env python3...

NoEscape Login Panel - Detect

NoEscape login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """NoEscape login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'NoEscape Login Panel - Detect', 'description':...

MPFTVC Admin Login Panel - Detect

MPFTVC admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """MPFTVC admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MPFTVC Admin Login Panel - Detect',...

Jolokia Detection

Detects Jolokia Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Jolokia Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.scanner.http.probeguard import lookslikejolokiaversion, validatejsonprobe class ModuleScanner, Httpclient: in...

WordPress Elementor Page Builder - Full Path Disclosure Detection

WordPress Plugin Elementor Page Builder plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin Elementor Page Builder plugin files...

Blockchain RPC - txpool_content Exposed Detection

The blockchain RPC endpoint exposes the txpoolcontent method, which returns all pending unmined transactions in the mempool including sender addresses, transaction data, gas prices, and values. This enables frontrunning attacks, sandwich attacks, and other MEV Maximal Extractable Value exploitati...

HTTPBin - Cross-Site Scripting Detection

HTTPBin contains a cross-site scripting vulnerability which can allow an attacker to execute arbitrary script. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks. !/usr/bin/env python3 -- coding: utf-8 -- """HTTPBin contains a cross-site scriptin...

Graphql Dianajl Detect

Detects Graphql Dianajl Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Graphql Dianajl Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Graphql Dianajl Detect', 'description': 'Detects Graphql...

BentoML v1.3.9 - Open Redirect Detection

An open redirect vulnerability exists in BentoML v1.3.9, where the file parameter in the /ui/gradioapi/file= endpoint can be manipulated to redirect users to malicious websites. This could facilitate phishing attacks by tricking users into visiting attacker-controlled URLs. !/usr/bin/env python3 ...

phpMyAdmin < 5.1.2 - Cross-Site Scripting Detection

An issue was discovered in phpMyAdmin 5.1 before 5.1.2 that could allow an attacker to inject malicious code into aspects of the setup script, which can allow cross-site or HTML injection. !/usr/bin/env python3 -- coding: utf-8 -- """An issue was discovered in phpMyAdmin 5.""" from kittysploit...

HuangDou UTCMS V9 - OS Command Injection Detection

A vulnerability, which was classified as critical, has been found in HuangDou UTCMS V9. Affected by this issue is some unknown functionality of the file app/modules/ut-cac/admin/cli.php. The manipulation of the argument o leads to os command injection.The attack may be launched remotely. The...

Grav CMS Detect

Detects Grav CMS !/usr/bin/env python3 -- coding: utf-8 -- """Detects Grav CMS.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Grav CMS Detect', 'description': 'Detects Grav CMS', 'author': 'KittySploit Team',...

WordPress Epsilon Framework Themes <=2.4.8 - Remote Code Execution Detection

WordPress themes including Shapely = 1.2.7, NewsMag = 2.4.1, Activello = 1.4.0, Illdy = 2.1.4, Allegiant = 1.2.2, Newspaper X = 1.3.1, Pixova Lite = 2.0.5, Brilliance = 1.2.7, MedZone Lite = 1.2.4, Regina Lite = 2.0.4, Transcend = 1.1.8, Affluent = 1.1.0, Bonkers = 1.0.4, Antreas = 1.0.2, Sparkli...

Monstra Installation Exposure Detection

Monstra is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Monstra is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

WordPress Advanced Access Manager - Path Traversal Detection

The Advanced Access Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Read in versions up to, and including, 5.9.8.1 due to insufficient validation on the aam-media parameter. This allows unauthenticated attackers to read any file on the server, including sensitive file...

Senayan Library Management System v9.5.2 (Bulian) - Cross-Site Scripting Detection

SLiMS 9.5.2 Bulian vulnerable to Cross-Site Scripting in index.php. When injected, website will execute the payload repeatedly !/usr/bin/env python3 -- coding: utf-8 -- """SLiMS 9.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: inf...

Schneider Electric Pelco VideoXpert Enterprise 2.0 - Path Traversal Detection

Schneider Electric Pelco VideoXpert Enterprise versions 2.0 and prior contain a directory traversal caused by insufficient input validation, letting unauthorized persons view web server files, exploit requires no authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Schneider Electric Pelc...

BigBlueButton Login Panel Detection

A BigBlueButton login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """A BigBlueButton login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'BigBlueButton Login Panel Detection',...

SFTPGo Admin - Setup Detection

SFTPGo Admin Password setup page has been exposed. !/usr/bin/env python3 -- coding: utf-8 -- """SFTPGo Admin Password setup page has been exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SFTPGo Admin - Setup...

Temenos T24 R20 - Cross-Site Scripting Detection

Temenos T24 release 20 contains a reflected cross-site scripting vulnerability via the routineName parameter at genrequest.jsp. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...

ExponentCMS <= 2.6 - Host Header Injection Detection

An HTTP Host header attack exists in ExponentCMS 2.6 and below in /exponentconstants.php. A modified HTTP header can change links on the webpage to an arbitrary value,leading to a possible attack vector for MITM. !/usr/bin/env python3 -- coding: utf-8 -- """An HTTP Host header attack exists in...

Allied Telesis AT-GS950/8 - Local File Inclusion Detection

Allied Telesis AT-GS950/8 until Firmware AT-S107 V.1.1.3 is susceptible to local file inclusion via its web interface. !/usr/bin/env python3 -- coding: utf-8 -- """Allied Telesis AT-GS950/8 until Firmware AT-S107 V.""" import re from kittysploit import from lib.protocols.http.httpclient import...

KodeExplorer 4.51 - Reflective Cross Site Scripting (XSS) Detection

Reflective Cross Site Scripting XSS vulnerability in KodExplorer version 4.51, allows attackers to obtain sensitive information and escalate privileges via the APPHOST parameter at config/i18n/en/main.php. !/usr/bin/env python3 -- coding: utf-8 -- """Reflective Cross Site Scripting XSS...

Siemens Logo! 8 Web - Panel Detection

Siemens Logo! 8 Web Login Panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Siemens Logo! 8 Web Login Panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Siemens Logo! 8 Web - Panel...

Oracle EBS SQL Log - Exposure Detection

Detected exposure of the sqlnet.log file in Oracle E-Business Suite EBS, which often contained sensitive information such as database connection details, TNS entries, usernames, and error logs. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposure of the sqlnet.""" from kittysploit impor...

T-Up OpenFrame Detection

Detects T-Up OpenFrame. !/usr/bin/env python3 -- coding: utf-8 -- """Detects T-Up OpenFrame.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'T-Up OpenFrame Detection', 'description': 'Detects T-Up OpenFrame.',...

Complete Online Job Search System 1.0 - Cross-Site Scripting Detection

Complete Online Job Search System 1.0 contains a cross-site scripting vulnerability via index.php?q=advancesearch. !/usr/bin/env python3 -- coding: utf-8 -- """Complete Online Job Search System 1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Default Parallels Plesk Panel Page Detection

Detects Default Parallels Plesk Panel Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Default Parallels Plesk Panel Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Default Parallels Plesk Panel Page...

Royal Event Management System Admin Panel - Detect

Royal Event Management System admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Royal Event Management System admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Royal Event...

Airflow Experimental <1.10.11 - REST API Auth Bypass Detection

Airflow's Experimental API prior 1.10.11 allows all API requests without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Airflow's Experimental API prior 1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

RethinkDB Administration Console - Detect

RethinkDB Administration Console was detected. !/usr/bin/env python3 -- coding: utf-8 -- """RethinkDB Administration Console was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'RethinkDB Administration...

Gitea Public Registration Enabled Detection

A misconfiguration in GlitchTip allows arbitrary users to sign up. !/usr/bin/env python3 -- coding: utf-8 -- """A misconfiguration in GlitchTip allows arbitrary users to sign up.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info ...

Vtiger CRM v7.2.0 - Directory Listing Detection

Vtiger CRM v7.2.0 contains a directory traversal vulnerability caused by improper access controls in /libraries and /layout directories, letting attackers display hidden files and list directories, exploit requires no authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Vtiger CRM v7."""...

Jboss Seam Debug Page Enabled Detection

Jboss Seam Debug Page was exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Jboss Seam Debug Page was exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Jboss Seam Debug Page Enabled Detection',...

GitLab public repositories Detection

Detects GitLab public repositories. !/usr/bin/env python3 -- coding: utf-8 -- """Detects GitLab public repositories.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GitLab public repositories Detection', 'description...

GitLab Instance Explore - Detect

This template checks for GitLab instances by verifying if /explore and /api/v4/projects endpoints are accessible with a 200 response. !/usr/bin/env python3 -- coding: utf-8 -- """This template checks for GitLab instances by verifying if /explore and /api/v4/projects endpoints are accessib.""" fro...

ArcGIS Exposed REST API documentation Detection

ArcGIS REST API documentation was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """ArcGIS REST API documentation was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ArcGIS Exposed REST API...

MaxKB Panel - Detect

MaxKB, an open-source RAG-based knowledge base and LLM chatbot platform, was detected. !/usr/bin/env python3 -- coding: utf-8 -- """MaxKB, an open-source RAG-based knowledge base and LLM chatbot platform, was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclien...