JBoss JMX Management Console Login Panel - Detect

JBoss JMX Management Console login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """JBoss JMX Management Console login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'JBoss JMX...

Jolokia - CompilerDirectivesAdd File Read Detection

Jolokia is vulnerable to local file inclusion via compilerDirectivesAdd. !/usr/bin/env python3 -- coding: utf-8 -- """Jolokia is vulnerable to local file inclusion via compilerDirectivesAdd.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Joomla! htaccess file disclosure Detection

Joomla! has an htaccess file to store configurations about HTTP config, directory listing, etc. !/usr/bin/env python3 -- coding: utf-8 -- """Joomla! has an htaccess file to store configurations about HTTP config, directory listing, etc.""" from kittysploit import from lib.protocols.http.httpclien...

Joomla! Component com_sef - Local File Inclusion Detection

A local file inclusion vulnerability in the Jvehicles comjvehicles component version 1.0 for Joomla! allows remote attackers to load arbitrary files via the controller parameter in index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A local file inclusion vulnerability in the Jvehicles...

Joomla MarvikShop ShoppingCart 3.4 - Sql Injection Detection

Joomla MarvikShop ShoppingCart 3.4 is vulnerable to SQL injection which is a code injection technique that might destroy your database. SQL injection is one of the most common web hacking techniques. SQL injection is the placement of malicious code in SQL statements, via web page input...

jotty·page Login - Panel Detect

jotty·page login interface was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """jotty·page login interface was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'jotty·page Login - Panel Detect',...

JsAPI Ticket Json Detection

JsAPI Ticket internal file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """JsAPI Ticket internal file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'JsAPI Ticket Json Detection', 'description':...

JshERP Boot Panel - Detect

Detects JshERP Boot Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects JshERP Boot Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'JshERP Boot Panel - Detect', 'description': 'Detect...

Juniper J-Web Panel - Detect

Juniper J-Web panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Juniper J-Web panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Juniper J-Web Panel - Detect', 'description':...

Jupyter Lab - Unauthenticated Access Detection

JupyterLab was able to be accessed without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """JupyterLab was able to be accessed without authentication.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Jupyt...

KACO New Energy Solar Inverter - Detect

KACO new energy is a solar inverter manufacturer. Their inverters include a built-in web server that serves compressed HTML over HTTP for monitoring inverter status and energy production data. Devices are commonly deployed on residential and commercial solar installations. !/usr/bin/env python3 -...

KafDrop - Cross-Site Scripting Detection

KafDrop contains a cross-site scripting vulnerability. It allows remote unauthenticated attackers to inject arbitrary HTML and/or JavaScript into the response returned by the server. !/usr/bin/env python3 -- coding: utf-8 -- """KafDrop contains a cross-site scripting vulnerability.""" from...

Kafka Operation API - Cluster Detection

Kafka Operation API Cluster page was detected and appeared to be accessible without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Kafka Operation API Cluster page was detected and appeared to be accessible without authentication.""" from kittysploit import from...

Apache Kafka Topics Panel - Detect

Apache Kafka Topics panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Kafka Topics panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Kafka Topics Panel - Detect',...

Kanboard - SQLite Database Exposure Detection

Detected Kanboard SQLite database file was found to be exposed, containing sensitive information including user credentials, project data, tasks, and comments. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Kanboard SQLite database file was found to be exposed, containing sensitive...

Kentico Login Panel - Detect

Kentico login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Kentico login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kentico Login Panel - Detect', 'description': 'Kentico...

KevinLAB HEMS - Backdoor Detection

KevinLAB HEMS has an undocumented backdoor account and these sets of credentials are never exposed to the end-user and cannot be changed through any normal operation of the solution through the RMI. An attacker could exploit this vulnerability by logging in using the backdoor account with highest...

Khodrochi CMS - Cross Site Scripting Detection

A cross site scripting vulnerability was found in the Khodrochi.ir CMS an Iranian Car Services Platform. !/usr/bin/env python3 -- coding: utf-8 -- """A cross site scripting vulnerability was found in the Khodrochi.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Khoj - Detect

Khoj was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Khoj was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Khoj - Detect', 'description': 'Khoj was detected.', 'author': 'KittySploit Team',...

Kiali - Detect

kiali panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """kiali panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kiali - Detect', 'description': 'kiali panel was detected.', 'author':...

Kiteworks PCN Panel - Detect

Kiteworks PCN Login Panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Kiteworks PCN Login Panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kiteworks PCN Panel - Detect', 'description...

Klog Server Panel - Detect

Klog Server panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Klog Server panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Klog Server Panel - Detect', 'description': 'Klog Serve...

KNR Author List Widget - Cross-site Scripting Detection

KNR Author List Widget suffers from Cross-site Scripting XSS in the listItem parameter. !/usr/bin/env python3 -- coding: utf-8 -- """KNR Author List Widget suffers from Cross-site Scripting XSS in the listItem parameter.""" from kittysploit import from lib.protocols.http.httpclient import...

Kodbox Installation Page - Exposure Detection

Kodbox is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Kodbox is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

KodExplorer-detect

Detects KodExplorer-detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects KodExplorer-detect.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'KodExplorer-detect', 'description': 'Detects...

Krayin CMS - Installer Detection

Krayin CRM installer page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Krayin CRM installer page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Krayin CMS - Installer Detection',...

Kubeflow Katib Panel - Detect

Kubeflow Katib, a Kubernetes-native project for automated machine learning AutoML that performs hyperparameter tuning, early stopping, and neural architecture search, was detected. Its web UI is normally served under the /katib/ path behind the Kubeflow Central Dashboard, fronted by an Istio/OIDC...

Kubeflow Pipelines Panel - Detect

Kubeflow Pipelines is an open-source platform for building and deploying portable, scalable ML workflows. It provides a web UI for managing ML pipelines, experiments, and runs on Kubernetes. !/usr/bin/env python3 -- coding: utf-8 -- """Kubeflow Pipelines is an open-source platform for building an...

Kubernetes Operational View Detect

Detects Kubernetes Operational View Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Kubernetes Operational View Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kubernetes Operational View Detect'...

Kubernetes Local Cluster Web View Panel- Detect

Kubernetes local cluster web view panel discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Kubernetes local cluster web view panel discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kubernetes Local...

LANDESK(R) Cloud Services Appliance Detect

Detects LANDESKR Cloud Services Appliance Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects LANDESKR Cloud Services Appliance Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LANDESKR Cloud Services...

Langtrace Panel - Detect

Langtrace, an open-source, OpenTelemetry-based observability platform for LLM applications that provides tracing, monitoring, and analytics for LLM, vector database, and framework calls, was detected. An exposed, self-hosted Langtrace dashboard instance was identified, which typically redirected...

Laragon - phpinfo Disclosure Detection

Laragon phpinfo file was exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Laragon phpinfo file was exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Laragon - phpinfo Disclosure Detection', 'description':...

Laravel Debugbar - Sensitive Information Exposure Detection

Laravel Debugbar barryvdh/laravel-debugbar was detected as enabled and publicly accessible. When left active in production, it exposes SQL queries, request data, session variables, mail logs, and application internals to any visitor. !/usr/bin/env python3 -- coding: utf-8 -- """Laravel Debugbar...

Laravel Login - Panel Detection

A Laravel login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """A Laravel login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Laravel Login - Panel Detection', 'description': 'A...

Laravel End-of-Life Detection

Detected Laravel framework versions that had reached End-of-Life EOL and no longer received security updates. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Laravel framework versions that had reached End-of-Life EOL and no longer received security updates.""" from kittysploit import from...

Lazy File Manager Detection

lfm.php file in exposed in Lazy File Manager. !/usr/bin/env python3 -- coding: utf-8 -- """lfm.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Lazy File Manager Detection', 'description': 'lfm.php file in exposed in...

Lexmark Device Detect

Detects Lexmark Device Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Lexmark Device Detect.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Lexmark Device Detect', 'description': 'Detects...

LibreChat Login Panel - Detection

Detected LibreChat login panel. LibreChat is an open-source, self-hosted AI chat interface. !/usr/bin/env python3 -- coding: utf-8 -- """Detected LibreChat login panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Libvirt Exporter Metrics Detection

Libvirt Exporter is leaking metrics. !/usr/bin/env python3 -- coding: utf-8 -- """Libvirt Exporter is leaking metrics.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Libvirt Exporter Metrics Detection', 'description...

Lidarr Dashboard - Unauthenticated Detection

Exposed Lidarr was detected which can lead to sensitive information disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Exposed Lidarr was detected which can lead to sensitive information disclosure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

LimeSurvey Survey Software - Detect

Limesurvey is the number one open-source survey software. Advanced features like branching and multiple question types make it a valuable partner for survey-creation. !/usr/bin/env python3 -- coding: utf-8 -- """Limesurvey is the number one open-source survey software.""" from kittysploit import...

Limesurvey Installer Exposure Detection

Limesurvey is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Limesurvey is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Listmonk Installer Exposure Detection

Listmonk is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Listmonk is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Live Helper Chat Detect

Detects Live Helper Chat Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Live Helper Chat Detect.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Live Helper Chat Detect', 'description': 'Detec...

LMSZAI Installer Exposure Detection

LMSZAI is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """LMSZAI is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

LocalAI - Detect

An instance running LocalAI was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An instance running LocalAI was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LocalAI - Detect', 'description': 'An...

LocalGPT Panel - Detect

LocalGPT is an open-source project that allows users to chat with their documents locally using LLMs with no data leaving their device !/usr/bin/env python3 -- coding: utf-8 -- """LocalGPT is an open-source project that allows users to chat with their documents locally using LLMs with no d.""" fr...

LoLLMS WebUI - Detect

An instance running LoLLMS WebUI was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An instance running LoLLMS WebUI was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LoLLMS WebUI - Detect',...

Lomnido Panel - Detect

Lomnido was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Lomnido was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Lomnido Panel - Detect', 'description': 'Lomnido was detected.', 'author':...