Checkmk Login Panel - Detect

Checkmk login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Checkmk login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Checkmk Login Panel - Detect', 'description': 'Checkmk...

TURN / coturn Service Detection

Detects TURN RFC 5766 and coturn by sending an Allocate Request on UDP 3478. !/usr/bin/env python3 -- coding: utf-8 -- """Detect TURN / coturn servers via Allocate Request.""" from kittysploit import from lib.protocols.ics.icsscannerclient import Icsscannerclient from lib.scanner.turn.detectors...

Hotjar RUM - Detect

Detects Hotjar Web Analytics & Session Recording artifacts. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Hotjar Web Analytics & Session Recording artifacts.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

WordPress Knews Multilingual Newsletters 1.1.0 - Cross-Site Scripting Detection

WordPress Knews Multilingual Newsletters 1.1.0 plugin contains a cross-site scripting vulnerability. An attacker can execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials an...

Quttera Web Malware Scanner <= 3.4.1.48 - Sensitive Data Exposure Detection

The Quttera Web Malware Scanner WordPress plugin before 3.4.2.1 doesn't restrict access to detailed scan logs, which allows a malicious actor to discover local paths and portions of the site's code !/usr/bin/env python3 -- coding: utf-8 -- """The Quttera Web Malware Scanner WordPress plugin befor...

Keycloak OpenID Configuration - Detect

Keycloak Openid configuration information was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Keycloak Openid configuration information was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Keycloak...

WhoDB < 0.45.0 - Path Traversal Detection

WhoDB contains a path traversal caused by lack of validation when opening database files, letting unauthenticated attackers access arbitrary Sqlite3 databases on the host system, exploit requires attacker to manipulate database filename input. !/usr/bin/env python3 -- coding: utf-8 -- """WhoDB...

Squid End-of-Life - Detect

Detected Squid proxy versions that have reached End-of-Life EOL and no longer receive security updates. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Squid proxy versions that have reached End-of-Life EOL and no longer receive security updates.""" from kittysploit import from...

CentOS Web Panel - OS Command Injection Detection

The unprivileged user portal part of CentOS Web Panel is affected by a Command Injection vulnerability leading to root Remote Code Execution. !/usr/bin/env python3 -- coding: utf-8 -- """The unprivileged user portal part of CentOS Web Panel is affected by a Command Injection vulnerability...

WP Content Copy Protection & No Right Click - Open Redirect Detection

The WP Content Copy Protection & No Right Click plugin before version 15.3 contains an open-redirect vulnerability via the referrer parameter in no-js.php, allowing redirection of users to external sites. !/usr/bin/env python3 -- coding: utf-8 -- """The WP Content Copy Protection & No Right Click...

ZOHO ManageEngine OpManager Panel - Detect

ZOHO ManageEngine OpManager panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ZOHO ManageEngine OpManager panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ZOHO ManageEngine OpManager...

Fortinet FortiOS - Open Redirect/Cross-Site Scripting Detection

FortiOS Web User Interface in 5.0.x before 5.0.13, 5.2.x before 5.2.3, and 5.4.x before 5.4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks or cross-site scripting attacks via the "redirect" parameter to "login." !/usr/bin/env python3 -- coding: utf...

MagnusBilling - Login Panel Detection

Identified an exposed MagnusBilling login panel. !/usr/bin/env python3 -- coding: utf-8 -- """Identified an exposed MagnusBilling login panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MagnusBilling - Login Pan...

Thanos Prometheus Setup - Exposure Detection

Thanos graph endpoint was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Thanos graph endpoint was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Thanos Prometheus Setup - Exposure Detection',...

TastyIgniter Setup Page - Exposure Detection

Detects exposed TastyIgniter Setup page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed TastyIgniter Setup page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'TastyIgniter Setup Page - Exposure...

SonicWall Email Security <= 10.0.9.x - Unauthenticated Admin Account Creation Detection

SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host. !/usr/bin/env python3 -- coding: utf-8 -- """SonicWall Email Security version 10.""" from kittysploit import from lib.protocols.http.httpclient...

Apache Tomcat - Cross-Site Scripting Detection

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in the number guess example for Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100, fro...

Eleanor CMS - Open Redirect Detection

Open redirect vulnerability in go.php in Eleanor CMS allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the QUERYSTRING. !/usr/bin/env python3 -- coding: utf-8 -- """Open redirect vulnerability in go.""" import re from kittysploit import fro...

Drupal 7 Elfinder - Unauthenticated Connector Exposure Detection

Identifies Drupal sites with the elfinder library installed, which could be vulnerable to unrestricted file upload through the connector.php file.When this component is detected, the site may be vulnerable to remote code execution attacks via PHP file uploads.This template only detects the presen...

ZOHO ManageEngine APEX IT Help-Desk Panel - Detect

ZOHO MangageEngine APEX panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ZOHO MangageEngine APEX panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ZOHO ManageEngine APEX IT Help-Desk...

Laravel Pulse - Unauthenticated Dashboard Access Detection

Laravel Pulse monitoring dashboard is accessible without authentication. Pulse displays server performance metrics, slow queries, user activity, cache hit rates, and exception logs that could aid attackers in reconnaissance. !/usr/bin/env python3 -- coding: utf-8 -- """Laravel Pulse monitoring...

Ivanti Traffic Manager Panel - Detect

An Ivanti Traffic Manager Login Panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An Ivanti Traffic Manager Login Panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ivanti Traffic...

DOMOS 5.5 - Local File Inclusion Detection

SECUDOS DOMOS before 5.6 allows local file inclusion via the log module. !/usr/bin/env python3 -- coding: utf-8 -- """SECUDOS DOMOS before 5.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'DOMOS 5.5 - Loca...

COMMAX Biometric Access Control System 1.0.0 - Authentication Bypass Detection

COMMAX Biometric Access Control System 1.0.0 suffers from an authentication bypass vulnerability. An unauthenticated attacker through cookie poisoning can bypass authentication and disclose sensitive information and circumvent physical controls in smart homes and buildings. !/usr/bin/env python3 ...

mysql.initial Config - Detect

mysql.initial configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """mysql.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'mysql.initial Config - Detect', 'description': 'mysql.initial...

WordPress User Registration Panel - Detect

WordPress user registration is currently configured so that anyone can register as a user, thereby enabling an attacker to possibly access sensitive data and execute unathorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress user registration is currently configured so that...

Azure Container Instance Default Page Detection

Detects Azure Container Instance Default Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Azure Container Instance Default Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Azure Container Instance...

Auerswald COMpact 5500R 7.8A and 8.0B Devices Backdoor Detection

Auerswald COMpact 5500R 7.8A and 8.0B devices contain an unauthenticated endpoint "https://192.168.1.2/aboutstate", enabling the bad actor to gain backdoor access to a web interface that allows for resetting the administrator password. !/usr/bin/env python3 -- coding: utf-8 -- """Auerswald COMpac...

WordPress Spider Calendar <=1.5.65 - Cross-Site Scripting Detection

WorsPress Spider Calendar plugin through 1.5.65 is susceptible to cross-site scripting. The plugin does not sanitize and escape the callback parameter before outputting it back in the page via the window AJAX action, available to both unauthenticated and authenticated users. An attacker can injec...

postMessage - Cross-Site Scripting Detection

postMessage contains a cross-site scripting vulnerability. An attacker can execute arbitrary script and therefore steal cookie-based authentication credentials and launch other attacks. !/usr/bin/env python3 -- coding: utf-8 -- """postMessage contains a cross-site scripting vulnerability.""" impo...

Nuxeo Platform Login Panel - Detect

Nuxeo Platform login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Nuxeo Platform login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Nuxeo Platform Login Panel - Detect',...

Magento Downloader - Full Path Disclosure Detection

Detected Magento Downloader component exposed internal file system paths through direct file access. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Magento Downloader component exposed internal file system paths through direct file access.""" from kittysploit import from...

Ncast HD Intelligent Recording - Arbitrary File Reading Detection

Ncast HD intelligent recording and broadcasting system has an arbitrary file reading vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """Ncast HD intelligent recording and broadcasting system has an arbitrary file reading vulnerability.""" import re from kittysploit import from...

osCommerce v4.0 - Cross-site Scripting Detection

A vulnerability, which was classified as problematic, was found in osCommerce 4. Affected is an unknown function of the file /catalog/all-products. The manipulation of the argument cat leads to cross site scripting. It is possible to launch the attack remotely. !/usr/bin/env python3 -- coding:...

MapTiler Tileserver-php v2.0 - Unauthenticated XSS Detection

MapTiler Tileserver-php v2.0 contains a reflected XSS caused by unencoded reflection of the GET parameter "layer" in an error message, letting unauthenticated attackers execute arbitrary script on victim browsers. !/usr/bin/env python3 -- coding: utf-8 -- """MapTiler Tileserver-php v2.""" from...

Pandora Fms < 3.1.1 - Directory Traversal Detection

Multiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow remote attackers to include and execute arbitrary local files via 1 the page parameter to ajax.php or 2 the id parameter to general/pandorahelp.php, and allow remote attackers to include and execute, create, modify, or...

WordPress Plugin CodeArt Google MP3 Player - File Disclosure Download Detection

WordPress Plugin CodeArt Google MP3 Player allows an unauthenticated attacker to download file from server. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin CodeArt Google MP3 Player allows an unauthenticated attacker to download file from server.""" from kittysploit import from...

Jenkins Sidepanel - Unauthorized Agent/Queue Exposure Detection

Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check in the sidepanel of a page intentionally accessible to users lacking Overall/Read permission, allowing attackers without Overall/Read permission to list agent names through its sidepanel executors widget...

XWiki >= 6.0-rc-1 - Cross-Site Scripting Detection

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page XSS. It's possible to exploit the delete template to perform a XSS, e.g. by using URL such as:...

VictoriaMetrics Panel - Detect

A VictoriaMetrics panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """A VictoriaMetrics panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'VictoriaMetrics Panel - Detect',...

ZOHO ManageEngine KeyManagerPlus Panel - Detect

ZOHO ManageEngine KeyManagerPlus panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ZOHO ManageEngine KeyManagerPlus panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.osint.faviconhash import shodanmmh3 class ModuleScanner,...

Infusionsoft Gravity Forms Add-on < 1.5.7 - Cross-Site Scripting Detection

Multiple cross-site scripting vulnerabilities in tests/notAutotestContactServicepauseCampaign.php in the Infusionsoft Gravity Forms plugin before 1.5.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 go, 2 contactId, or 3 campaignId parameter. !/usr/bin/env...

TOTOLINK Installer - Exposure Detection

Detects the presence of TOTOLINK router setup pages at /wizardset.htm and /easysetup.htm. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of TOTOLINK router setup pages at /wizardset.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

CasaOS < 0.4.4 - Authentication Bypass via Random JWT Token Detection

CasaOS is an open-source Personal Cloud system. Unauthenticated attackers can craft arbitrary JWTs and access features that usually require authentication and execute arbitrary commands as root on CasaOS instances. This problem was addressed by improving the validation of JWTs in commit 705bf1f...

WampServer Panel - Detect

WampServer panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """WampServer panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WampServer Panel - Detect', 'description': 'WampServer panel...

CAREL Pl@ntVisor Panel Detection

Carel plantvisor panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Carel plantvisor panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'CAREL Pl@ntVisor Panel Detection', 'description':...

idcCMS V1.60 - Cross-Site Scripting Detection

idcCMS V1.60 is vulnerable to reflected cross-site scripting XSS via the idName parameter in read.php. Unsanitized user input is reflected in the response, allowing arbitrary JavaScript execution. !/usr/bin/env python3 -- coding: utf-8 -- """idcCMS V1.""" from kittysploit import from...

StrongShop Installer - Exposure Detection

Detects the exposure of the StrongShop installer page, which could allow unauthorized setup or reinstallation of the application. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the exposure of the StrongShop installer page, which could allow unauthorized setup or reinstallation .""" from...

Zend Server Test Page Detection

Detects Zend Server Test Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Zend Server Test Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Zend Server Test Page Detection', 'description': 'Detects Zen...

Stirling PDF Panel - Detect

Stirling PDF panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Stirling PDF panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Stirling PDF Panel - Detect', 'description': 'Stirlin...