SAPControl GetEnvironment - Disclosure Detection

Detected SAP systems where the SAP Start Service sapstartsrv SAPControl SOAP web service exposes the GetEnvironment web method without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Detected SAP systems where the SAP Start Service sapstartsrv SAPControl SOAP web service exposes the...

Jinhe OA_C6_UploadFileDownLoadnew - Arbitrary File Read Detection

There is an arbitrary file reading vulnerability in the UploadFileDownLoadnew.aspx interface of Jinhe OA C6. An unauthenticated attacker can use this vulnerability to read important system files such as database configuration files, system configuration files, database configuration files, etc.,...

JetBrains WebServers File - Detect

JetBrains webservers file was detected. The file contains webserver credentials with encoded passwords. !/usr/bin/env python3 -- coding: utf-8 -- """JetBrains webservers file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Jira Unauthenticated Access to screens Detection

Detects Jira Unauthenticated Access to screens. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Jira Unauthenticated Access to screens.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Jira Unauthenticated Access...

Joget Panel - Detect

Joget panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Joget panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Joget Panel - Detect', 'description': 'Joget panel was detected.',...

Jolokia <= 1.7.1 Information Leakage Detection

Tomcat's credential disclosure leading to Remote Code Execution via WAR upload. !/usr/bin/env python3 -- coding: utf-8 -- """Tomcat's credential disclosure leading to Remote Code Execution via WAR upload.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Joomla JLex Review 6.0.1 - Cross-Site Scripting Detection

The attacker can send to victim a link containing a malicious URL in an email or instant message can perform a wide variety of actions, such as stealing the victim's session token or login credentials. !/usr/bin/env python3 -- coding: utf-8 -- """The attacker can send to victim a link containing ...

Jotform API Key Detection

Detects Jotform API Key. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Jotform API Key.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Jotform API Key Detection', 'description': 'Detects Jotform API...

Visual Studio Code jsconfig.json - Detect

Visual Studio Code jsconfig.json was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Visual Studio Code jsconfig.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Visual Studio Code jsconfig.json - Detect',...

Json Server Detection

Detects Json Server. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Json Server.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Json Server Detection', 'description': 'Detects Json Server.', 'author':...

Jupyter notebooks exposed to reading and writing Detection

Jupyter notebooks are exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Jupyter notebooks are exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Jupyter notebooks exposed to reading and writing Detection',...

Jupyter Notebook Login Panel - Detect

Jupyter Notebook login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Jupyter Notebook login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Jupyter Notebook Login Panel - Detect...

Kae's File Manager Login Panel - Detect

Kae's File Manager login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Kae's File Manager login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': "Kae's File Manager Login Panel -...

Apache Kafka Control Center Login Panel - Detect

Apache Kafka Control Center login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Kafka Control Center login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Kafka...

Kafka Cruise Control UI Detection

Kafka Cruise Control UI is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Kafka Cruise Control UI is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kafka Cruise Control UI Detection', 'description':...

Kargo Login Panel - Detect

Kargo login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Kargo login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kargo Login Panel - Detect', 'description': 'Kargo login...

Kavita Login Panel - Detect

Kavita login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Kavita login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kavita Login Panel - Detect', 'description': 'Kavita logi...

Kenesto - Login Detect

Kenesto login panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Kenesto login panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kenesto - Login Detect', 'description': 'Kenesto...

Kerio Controle Panel - Detect

Protect your network from viruses, malware and malicious activity with GFI KerioControl, the easy-to-administer yet powerful all-in-one security solution. !/usr/bin/env python3 -- coding: utf-8 -- """Protect your network from viruses, malware and malicious activity with GFI KerioControl, the...

Kerio Connect Login Panel - Detect

Kerio Connect login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Kerio Connect login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kerio Connect Login Panel - Detect',...

Keycloak Admin Login Panel - Detect

Keycloak admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Keycloak admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Keycloak Admin Login Panel - Detect',...

Kae's File Manager Admin Login Panel - Detect

Kae's File Manager admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Kae's File Manager admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': "Kae's File Manager...

Kingsoft Web Server Detect

Detects Kingsoft Web Server Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Kingsoft Web Server Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kingsoft Web Server Detect', 'description': 'Detect...

Kiwi TCMS Login Panel - Detect

Kiwi TCMS login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Kiwi TCMS login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kiwi TCMS Login Panel - Detect', 'description': 'Ki...

KLR 300N Router - Exposed Installation Detection

Home router wireless KLR 300N setup page were Detected. !/usr/bin/env python3 -- coding: utf-8 -- """Home router wireless KLR 300N setup page were Detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'KLR 300N...

KoboldAI Panel - Detect

KoboldAI was detected. KoboldAI was an AI text adventure and story generation interface that supports multiple local and remote language models including koboldcpp and AI Horde. !/usr/bin/env python3 -- coding: utf-8 -- """KoboldAI was detected.""" from kittysploit import from...

Krpano Panorama Viewer - Detection

Detected Krpano Panorama Viewer by identifying known Krpano-specific resources and response patterns. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Krpano Panorama Viewer by identifying known Krpano-specific resources and response patterns.""" from kittysploit import from...

Kubelet Metrics Detection

Kube Metrics Server was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Kube Metrics Server was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kubelet Metrics Detection', 'description': 'Kube Metric...

Kubernetes Dashboard Panel - Detect

Kubernetes Dashboard panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Kubernetes Dashboard panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kubernetes Dashboard Panel - Detect',...

Kubernetes Enterprise Manager Panel - Detect

Kubernetes Enterprise Manager panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Kubernetes Enterprise Manager panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kubernetes Enterprise...

Detect Kubernetes Exposed Metrics

Information Disclosure of Garbage Collection !/usr/bin/env python3 -- coding: utf-8 -- """Information Disclosure of Garbage Collection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect Kubernetes Exposed...

Detect Overview Kubernetes Resource Report

Information Disclosure of Kubernetes Resource Report !/usr/bin/env python3 -- coding: utf-8 -- """Information Disclosure of Kubernetes Resource Report.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect Overview...

Kube API Deployments Detection

Scans for kube deployments !/usr/bin/env python3 -- coding: utf-8 -- """Scans for kube deployments.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kube API Deployments Detection', 'description': 'Scans for kube...

Kube API Pods Detection

Scans for kube pods !/usr/bin/env python3 -- coding: utf-8 -- """Scans for kube pods.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kube API Pods Detection', 'description': 'Scans for kube pods', 'author':...

Kube API Version Detection

Searches for exposed Kubernetes API servers which return version information unauthenticated !/usr/bin/env python3 -- coding: utf-8 -- """Searches for exposed Kubernetes API servers which return version information unauthenticated.""" from kittysploit import from lib.protocols.http.httpclient...

LabTech Web Portal Login Panel - Detect

LabTech Web Portal login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """LabTech Web Portal login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LabTech Web Portal Login Panel -...

LabVIEW/NI Service Locator Detection

National Instruments LabVIEW Service Locator detected and enumerated. This services leaks a list of all services provided by the device, hardware capabilities and possibly versions. These hardware devices should not be exposed to the internet. !/usr/bin/env python3 -- coding: utf-8 -- """National...

Landray EIS WS_getAllInfos - Information Disclosure Detection

Landray EIS WSgetAllInfos interface suffers from a sensitive information disclosure vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """Landray EIS WSgetAllInfos interface suffers from a sensitive information disclosure vulnerability.""" from kittysploit import from...

Langfuse Panel - Detect

Langfuse panel was detected. Langfuse is an open-source LLM engineering platform for observability, evaluations, prompt management and analytics. Exposed instances may reveal LLM prompts, traces, evaluations, and connected API keys. !/usr/bin/env python3 -- coding: utf-8 -- """Langfuse panel was...

Lansweeper Login Panel - Detect

Lansweeper login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Lansweeper login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Lansweeper Login Panel - Detect', 'description':...

LDAP Account Manager Login Panel - Detect

LDAP Account Manager login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """LDAP Account Manager login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LDAP Account Manager Login...

LVS Lean Value Management System Business - Directory Listing Detection

Multiple systems of Hangzhou Jila Technology Co., Ltd. have been found to have directory traversal vulnerabilities. These vulnerabilities arise from the inadequate access controls implemented in the /Business/ directory. Malicious actors can potentially leverage these vulnerabilities to illicitly...

Lenovo ThinkServer System Manager Login Panel - Detect

Lenovo ThinkServer System Manager login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Lenovo ThinkServer System Manager login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Letta Panel - Detect

Letta formerly MemGPT is an open-source framework for building stateful LLM agents with long-term memory. !/usr/bin/env python3 -- coding: utf-8 -- """Letta formerly MemGPT is an open-source framework for building stateful LLM agents with long-term memory.""" from kittysploit import from...

LibrePhotos Panel - Detect

Detects LibrePhotos Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects LibrePhotos Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LibrePhotos Panel - Detect', 'description': 'Detect...

Ligolo-ng Panel - Detect

Ligolo-ng panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ligolo-ng panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ligolo-ng Panel - Detect', 'description': 'Ligolo-ng panel was...

LimeSurvey - Open Redirect via editorLink Detection

LimeSurvey before 6.16.11 contains an open redirect vulnerability in the editorLink route. An attacker can craft a URL that redirects users to an arbitrary external site, potentially enabling phishing attacks. !/usr/bin/env python3 -- coding: utf-8 -- """LimeSurvey before 6.""" import re from...

LiteLLM API - Swagger UI Detection

Detects exposed LiteLLM API Swagger UI interface. LiteLLM is a unified API for 100+ LLM providers OpenAI, Azure, Anthropic, etc.. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed LiteLLM API Swagger UI interface.""" from kittysploit import from lib.protocols.http.httpclient import...

LiveZilla Login Panel - Detect

LiveZilla login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """LiveZilla login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LiveZilla Login Panel - Detect', 'description':...

LM Studio Panel - Detect

LM Studio is a desktop application for discovering, downloading, and running local LLMs !/usr/bin/env python3 -- coding: utf-8 -- """LM Studio is a desktop application for discovering, downloading, and running local LLMs.""" from kittysploit import from lib.protocols.http.httpclient import...