Redis Commander Panel - Detect

Redis Commander panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Redis Commander panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Redis Commander Panel - Detect', 'description':...

Redis Enterprise - Detect

Detects Redis Enterprise - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Redis Enterprise - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Redis Enterprise - Detect', 'description': 'Detects...

Detect Redmine CLI Configuration File

A small command-line utility to interact with Redmine - https://pypi.org/project/Redmine-CLI/ !/usr/bin/env python3 -- coding: utf-8 -- """A small command-line utility to interact with Redmine - https://pypi.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

RED-V Super Digital Signage System RXV-A740R - Log Information Disclosure Detection

The application is vulnerable to sensitive information disclosure vulnerability. An unauthenticated attacker can visit several endpoints and disclose the webserver's log file list containing sensitive system resources and debug log information running on the device. !/usr/bin/env python3 -- codin...

Regify Login Panel - Detect

Regify Login Panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Regify Login Panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Regify Login Panel - Detect', 'description': 'Regify Logi...

Rekognition Image Validation Debug UI Panel - Detect

Rekognition Image Validation UI panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Rekognition Image Validation UI panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Rekognition Image...

Remote Spark Gateway Configuration/Credentials - Exposure Detection

Remote Spark Gateway config found via /gateway.conf. !/usr/bin/env python3 -- coding: utf-8 -- """Remote Spark Gateway config found via /gateway.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Remote Spark...

Reposilite Login Panel - Detect

Reposilite products was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Reposilite products was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Reposilite Login Panel - Detect', 'description':...

Reportico Administration Page - Detect

Create a simple report using the designer front end in seconds from a single SQL statement. Add expressions, user criteria, charts, groups, aggregations, page headers, page footers, hyperlinks and even custom plugin code. !/usr/bin/env python3 -- coding: utf-8 -- """Create a simple report using t...

Residential Gateway Login Panel - Detect

Residential Gateway login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Residential Gateway login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Residential Gateway Login Panel...

Caucho Resin LFR Detection

A vulnerability in Caucho Resin allows remote unauthenticated users to utilize the 'inputFile' variable to include the content of locally stored files and disclose their content. !/usr/bin/env python3 -- coding: utf-8 -- """A vulnerability in Caucho Resin allows remote unauthenticated users to...

Rhadamanthys Stealer C2 Panel - Detect

Detects Rhadamanthys Stealer C2 Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Rhadamanthys Stealer C2 Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Rhadamanthys Stealer C2 Pan...

Ricoh Web Image Monitor - Detect

Ricoh Web Image Monitor device was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ricoh Web Image Monitor device was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ricoh Web Image Monitor - Detect'...

AVTECH Room Alert Login Panel - Detect

AVTECH Room Alert login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """AVTECH Room Alert login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AVTECH Room Alert Login Panel -...

RSA Self-Service Login Panel - Detect

RSA Self-Service login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """RSA Self-Service login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'RSA Self-Service Login Panel - Detect...

RStudio Sign In Panel - Detect

RStudio Sign In panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """RStudio Sign In panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'RStudio Sign In Panel - Detect', 'description':...

Ruby on Rails storage.yml File Disclosure Detection

Ruby on Rails storage.yml file is disclosed. !/usr/bin/env python3 -- coding: utf-8 -- """Ruby on Rails storage.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ruby on Rails storage.yml File Disclosure Detection',...

Ruijie RG-EG - Remote Code Execution Detection

Ruijie RG-EG easy gateway WEB management system front-end RCE has a command execution vulnerability. An attacker without identity authentication can execute arbitrary commands to control server permissions. !/usr/bin/env python3 -- coding: utf-8 -- """Ruijie RG-EG easy gateway WEB management syst...

SafeNet Authentication Login Panel - Detect

SafeNet Authentication Service Self Enrollment login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SafeNet Authentication Service Self Enrollment login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Sails.js Framework - Detect

Detects the presence of the Sails.js, a realtime MVC framework for Node.js. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of the Sails.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

SaltStack Config Panel - Detect

SaltStack config panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SaltStack config panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SaltStack Config Panel - Detect', 'description':...

Samba Config - Detect

Samba configuration information was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Samba configuration information was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Samba Config - Detect',...

Samsung SmartTV Debug Config Detection

Detects Samsung SmartTV Debug Config. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Samsung SmartTV Debug Config.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Samsung SmartTV Debug Config Detection',...

Sangfor EDR - Authentication Bypass Detection

Sangfor EDR contains an authentication bypass vulnerability. An attacker can access the system with admin privileges by accessing the login page directly using a provided username rather than going through the login screen without providing a username. This makes it possible to obtain sensitive...

Sangfor Application Login - Remote Command Execution Detection

Sangfor application delivery management system login has a remote command execution vulnerability, through which an attacker can obtain server privileges and execute arbitrary commands !/usr/bin/env python3 -- coding: utf-8 -- """Sangfor application delivery management system login has a remote...

SAPControl ABAPReadSyslog - Disclosure Detection

Detected SAP systems where the SAPControl SOAP web service exposes the ABAPReadSyslog operation without authentication. ABAPReadSyslog returns the ABAP system log equivalent to transaction SM21 via SAPControl sapstartsrv and includes fields such as client, username, transaction code, message...

SAP Analytics Cloud Panel - Detect

SAP Analytics Cloud panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SAP Analytics Cloud panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SAP Analytics Cloud Panel - Detect',...

SAPControl Webmethods - Disclosure Detection

Detected SAP systems where the SAP Start Service sapstartsrv SAPControl SOAP interface exposes the GetInstanceProperties method without requiring authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Detected SAP systems where the SAP Start Service sapstartsrv SAPControl SOAP interface...

SAPControl GetVersionInfo - Detect

Detected SAP systems where the SAP Start Service sapstartsrv SAPControl SOAP interface exposes the GetVersionInfo web method without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Detected SAP systems where the SAP Start Service sapstartsrv SAPControl SOAP interface exposes the...

OAuth 2.0 Authorization Server Detection Template

Try to detect OAuth 2.0 Authorization Server via the "oauth/token" endpoint !/usr/bin/env python3 -- coding: utf-8 -- """Try to detect OAuth 2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OAuth 2.0 Authorization...

Well-Known OAuth Authorization Server Metadata Detection

Detects OAuth 2.0 Authorization Server metadata RFC 8414. !/usr/bin/env python3 -- coding: utf-8 -- """Detects OAuth 2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Well-Known OAuth Authorization Server Metadata...

Oauth Credentials Json Detection

Oauth Credentials file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Oauth Credentials file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Oauth Credentials Json Detection', 'description':...

OcoMon Login Panel - Detect

a tiny helpdesk system written in php !/usr/bin/env python3 -- coding: utf-8 -- """a tiny helpdesk system written in php.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OcoMon Login Panel - Detect',...

OpenConnect VPN Server (ocserv) - Detect

OpenConnect VPN Server ocserv is an open-source VPN server compatible with Cisco AnyConnect clients. It uses DTLS and TLS for secure connectivity and is commonly exposed on port 443 or 4443. The server header can expose OpenConnect or ocserv-specific markers. !/usr/bin/env python3 -- coding: utf-...

OCS Inventory Login Panel - Detect

OCS Inventory login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """OCS Inventory login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OCS Inventory Login Panel - Detect',...

OctoberCMS detect

Detects OctoberCMS !/usr/bin/env python3 -- coding: utf-8 -- """Detects OctoberCMS.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OctoberCMS detect', 'description': 'Detects OctoberCMS', 'author': 'KittySploit Team...

Octoprint 3D Printer Panel - Detect

Octoprint 3D Printer panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Octoprint 3D Printer panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Octoprint 3D Printer Panel - Detect',...

Odoo CMS - Open Redirect Detection

Odoo CMS contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """Odoo CMS contains an open redirect vulnerability."""...

Odoo - Database Manager Discovery Detection

Odoo database manager was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Odoo database manager was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Odoo - Database Manager Discovery Detection',...

O2 Router Setup Panel - Detect

O2 router setup panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """O2 router setup panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'O2 Router Setup Panel - Detect', 'description': 'O2...

Detect OpenID Connect provider

Detects OpenID Connect providers. See https://en.wikipedia.org/wiki/OpenIDConnect !/usr/bin/env python3 -- coding: utf-8 -- """Detects OpenID Connect providers.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect...

Open Journal Systems Installer - Exposure Detection

Open Journal Systems is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Open Journal Systems is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient...

OKI Data Panel - Detect

OKI Data panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """OKI Data panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OKI Data Panel - Detect', 'description': 'OKI Data panel was...

Ollama - Improper Authorization Detection

Detected an exposed Ollama API without proper authorization, allowing unauthorized access to AI models and operations. !/usr/bin/env python3 -- coding: utf-8 -- """Detected an exposed Ollama API without proper authorization, allowing unauthorized access to AI models and ope.""" from kittysploit...

Ollama LLM Panel - Detect

Ollama LLM Panel was detected !/usr/bin/env python3 -- coding: utf-8 -- """Ollama LLM Panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ollama LLM Panel - Detect', 'description': 'Ollama LLM Panel w...

Omnia MPX Node Login Panel - Detect

Omnia MPX Node login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Omnia MPX Node login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Omnia MPX Node Login Panel - Detect',...

OneBlog Detect

Detects OneBlog Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects OneBlog Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OneBlog Detect', 'description': 'Detects OneBlog Detect.', 'author':...

OneinStack Control Center Dashboard - Detect

OneinStack Control Center dashboard was detected. !/usr/bin/env python3 -- coding: utf-8 -- """OneinStack Control Center dashboard was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OneinStack Control Cent...

1Password SCIM Bridge Detection

Detects exposed 1Password SCIM Bridge login panels. !/usr/bin/env python3 -- coding: utf-8 -- """Detect 1Password SCIM Bridge login panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "1Password SCIM Bridge...

Online Farm Management System 0.1.0 - Cross-Site Scripting Detection

Online Farm Management System 0.1.0 contains a cross-site scripting vulnerability via the review.php file. !/usr/bin/env python3 -- coding: utf-8 -- """Online Farm Management System 0.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...