QuickCMS Installation Wizard Detection

PMM is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """PMM is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

QVidium Management System Exposed Detection

QVidium Management System is Exposed. !/usr/bin/env python3 -- coding: utf-8 -- """QVidium Management System is Exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'QVidium Management System Exposed Detection',...

RailsAdmin Dashboard Exposure Detection

Detected RailsAdmin dashboard was exposed without proper authentication, allowing unauthorized access to data management interface. !/usr/bin/env python3 -- coding: utf-8 -- """Detected RailsAdmin dashboard was exposed without proper authentication, allowing unauthorized access to data .""" from...

Rallly Login - Panel Detect

Rallly login interface was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Rallly login interface was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Rallly Login - Panel Detect', 'description':...

Apache Ranger Detection

Detects Apache Ranger Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Apache Ranger Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Ranger Detection', 'description': 'Detects Apache...

Rasa Open Source - Detect

Rasa Open Source, an open-source conversational AI framework used to build chatbots and voice assistants that exposes a REST server default port 5005 for intent parsing and webhook-driven conversations, was detected. Exposed unauthenticated instances may have allowed interaction with the...

Ray Dashboard Exposure Detection

Ray Dashboard is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Ray Dashboard is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ray Dashboard Exposure Detection', 'description': 'Ray Dashboard is...

React CRA Asset Manifest Exposure Detection

Detects Create React App asset-manifest.json and similar build manifests that enumerate hashed bundles and help map the SPA attack surface. !/usr/bin/env python3 -- coding: utf-8 -- """Detect CRA asset-manifest.json / build metadata exposure.""" import json from kittysploit import from...

React SPA Stack Detection

Identifies standalone React SPAs CRA / Vite / classic and explicitly differentiates them from Next.js so the correct scanner pack can run. !/usr/bin/env python3 -- coding: utf-8 -- """Fingerprint React SPA stacks and distinguish them from Next.js.""" from kittysploit import from...

React / Node Dotenv File Exposure Detection

Checks for publicly readable .env / .env.local / .env.production files that often leak REACTAPP / VITE secrets on misconfigured SPA hosts. !/usr/bin/env python3 -- coding: utf-8 -- """Detect exposed .env files on React / Vite / Node SPA deployments.""" from kittysploit import from...

Redash Installer Exposure Detection

Redash is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Redash is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Reddit Top RSS - Cross-Site Scripting Detection

Reddit Top RSS contains a cross-site scripting vulnerability via the /?subreddit=news&score= parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Reddit Top RSS contains a cross-site scripting vulnerability via the /?subreddit=news&score= parameter.""" from kittysploit import from...

Redmine Configuration File - Detect

Redmine configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Redmine configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Redmine Configuration File - Detect',...

Red Lion Control Panel - Detect

Detects Red Lion Control Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Red Lion Control Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Red Lion Control Panel - Detect',...

Remotely Registration Enabled Detection

Checks if the Remotely self-hosted remote desktop and collaboration web application has its user registration endpoint enabled, potentially allowing anyone to register without invitation. !/usr/bin/env python3 -- coding: utf-8 -- """Checks if the Remotely self-hosted remote desktop and...

Reolink Panel - Detect

Reolink panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Reolink panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Reolink Panel - Detect', 'description': 'Reolink panel was...

Repetier Server Dashboard - Unauthenticated Detection

Repetier Server Dashboard has been exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Repetier Server Dashboard has been exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Repetier Server Dashboard -...

Request Baskets - Exposure Detection

Request Baskets is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Request Baskets is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Request Baskets - Exposure Detection', 'description': 'Request...

Request Tracker - Panel Detection

Request Tracker panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Request Tracker panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Request Tracker - Panel Detection',...

RethinkDB Administration Console - Detect

RethinkDB Administration Console was detected. !/usr/bin/env python3 -- coding: utf-8 -- """RethinkDB Administration Console was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'RethinkDB Administration...

Retool Login Panel - Detect

Retool login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Retool login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Retool Login Panel - Detect', 'description': 'Retool logi...

Retool < 3.88 - SVG Cross-Site Scripting Detection

This template checks for SVG Cross-Site ScriptingXSS vulnerability via the Image Proxy URL parameter in Retool. !/usr/bin/env python3 -- coding: utf-8 -- """This template checks for SVG Cross-Site ScriptingXSS vulnerability via the Image Proxy URL parameter in Reto.""" from kittysploit import fro...

Ruijie RG-UAC Login Panel - Detect

Ruijie RG-UAC login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ruijie RG-UAC login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ruijie RG-UAC Login Panel - Detect',...

Rhymix CMS Detect

Detects Rhymix CMS !/usr/bin/env python3 -- coding: utf-8 -- """Detects Rhymix CMS.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Rhymix CMS Detect', 'description': 'Detects Rhymix CMS', 'author': 'KittySploit Team...

Riello UPS NetMan 204 Panel - Detect

Riello UPS NetMan 204 login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Riello UPS NetMan 204 login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Riello UPS NetMan 204 Panel...

RoboMongo Credential - Exposure Detection

A MongoDB credentials file used by RoboMongo was detected. !/usr/bin/env python3 -- coding: utf-8 -- """A MongoDB credentials file used by RoboMongo was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

RockMongo 1.1.8 - Cross-Site Scripting Detection

RockMongo 1.1.8 contains a cross-site scripting vulnerability which allows attackers to inject arbitrary JavaScript into the response returned by the application. !/usr/bin/env python3 -- coding: utf-8 -- """RockMongo 1.""" from kittysploit import from lib.protocols.http.httpclient import...

Rockwell Automation FactoryTalk ViewPoint - Panel Detection

Rockwell Automation FactoryTalk ViewPoint is a web-based HMI that allows remote monitoring and control of industrial automation systems from a browser. It provides access to FactoryTalk View Machine Edition and Site Edition displays. Exposed instances may allow unauthorised access to industrial...

Rosariosis Detect

Detects Rosariosis Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Rosariosis Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Rosariosis Detect', 'description': 'Detects Rosariosis Detect.',...

Roundcube Webmail Installer - Exposure Detection

Detects exposure of the Roundcube Webmail installer interface. Public access to this installer may allow attackers to reconfigure the webmail application, potentially leading to email account compromise or the disclosure of sensitive configuration details. !/usr/bin/env python3 -- coding: utf-8 -...

Roxy File Manager - Panel Detect

Roxy File Manager panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Roxy File Manager panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Roxy File Manager - Panel Detect', 'description...

RSSHub Detect

Detects RSSHub Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects RSSHub Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.osint.faviconhash import shodanmmh3 class ModuleScanner, Httpclient: info = 'name': 'RSSHub Detect', 'description':...

RTM WEB - Panel Detection

Detects RTM WEB - Panel. !/usr/bin/env python3 -- coding: utf-8 -- """Detects RTM WEB - Panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'RTM WEB - Panel Detection', 'description': 'Detects RTM WEB - Panel.',...

Rubocop Configuration - Detect

Rubocop configuration information was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Rubocop configuration information was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Rubocop Configuration -...

Ruckus SmartZone Exposed Installation Detection

Ruckus SmartZone is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Ruckus SmartZone is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import...

Ruckus Unleashed Exposed Installation Detection

Ruckus Unleashed is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Ruckus Unleashed is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import...

Ruijie NBR1300G Cli Password Leak - Detect

Ruijie NBR1300G CLI password leak vulnerability was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ruijie NBR1300G CLI password leak vulnerability was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

RG-UAC Ruijie - Password Hashes Leak Detection

Multiple Firewall Devices from vendor Ruijie Networks are affected by an information leakage vulnerability where credentials are included in the source code of the web admin login interface usernames, roles, MD5 hashes and additional details of each user. Attackers can use this information to...

R WebServer Login Panel - Detect

R WebServer login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """R WebServer login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'R WebServer Login Panel - Detect', 'description...

S3CMD Configuration - Detect

S3CMD configuration information was detected. !/usr/bin/env python3 -- coding: utf-8 -- """S3CMD configuration information was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'S3CMD Configuration - Detect',...

Detect Amazon-S3 Bucket

Detects Detect Amazon-S3 Bucket. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Detect Amazon-S3 Bucket.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect Amazon-S3 Bucket', 'description': 'Detec...

Amazon S3 Torrent Download - Detect

Amazon S3 Torrent download was detected, which can allow a malicious user to download files. !/usr/bin/env python3 -- coding: utf-8 -- """Amazon S3 Torrent download was detected, which can allow a malicious user to download files.""" from kittysploit import from lib.protocols.http.httpclient impo...

Saferoads VMS Login Panel - Detect

Saferoads VMS login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Saferoads VMS login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Saferoads VMS Login Panel - Detect',...

Sage X3 Login Panel - Detect

Sage X3 login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Sage X3 login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sage X3 Login Panel - Detect', 'description': 'Sage X3...

Saia PCD Web-Server Configuration Page - Detect

Saia PCD Web-Server configuration page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Saia PCD Web-Server configuration page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Saia PCD Web-Serv...

Salesforce B2C Commerce WebDAV - Detection

Detects Salesforce B2C Commerce WebDAV by checking for specific patterns in a 404 response. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Salesforce B2C Commerce WebDAV by checking for specific patterns in a 404 response.""" from kittysploit import from lib.protocols.http.httpclient import...

Salesforce Credentials - Detect

Salesforce credentials information was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Salesforce credentials information was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Salesforce Credentials -...

SaltGUI Login Panel - Detect

SaltGUI login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SaltGUI login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SaltGUI Login Panel - Detect', 'description': 'SaltGUI...

Sangfor Next-Generation Application Firewall (NGAF) - Login Panel Detection

Sangfor NGAF is a next-generation application firewall and SSL VPN gateway by Sangfor Technologies. It is widely deployed in APAC and China-based enterprises. The management portal is frequently exposed on non-standard ports. !/usr/bin/env python3 -- coding: utf-8 -- """Sangfor NGAF is a...

Sanity Studio Panel - Detect

Sanity Studio panel was detected. Sanity is a headless CMS platform. !/usr/bin/env python3 -- coding: utf-8 -- """Sanity Studio panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sanity Studio Panel ...