Kraken Cluster Monitoring Dashboard - Detect

Kraken Cluster Monitoring Dashboard was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Kraken Cluster Monitoring Dashboard was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kraken Cluster Monitori...

Kubelet Healthz Detection

Scans for kubelet healthz !/usr/bin/env python3 -- coding: utf-8 -- """Scans for kubelet healthz.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kubelet Healthz Detection', 'description': 'Scans for kubele...

Kubelet Scan Detection

Scans for kubelet pods !/usr/bin/env python3 -- coding: utf-8 -- """Scans for kubelet pods.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kubelet Scan Detection', 'description': 'Scans for kubelet pods', 'author':...

Kubelet Stats Detection

Scans for kubelet stats !/usr/bin/env python3 -- coding: utf-8 -- """Scans for kubelet stats.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kubelet Stats Detection', 'description': 'Scans for kubelet stats',...

Kubernetes etcd Keys - Exposure Detection

Kubernetes private etcd keys are exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Kubernetes private etcd keys are exposed.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kubernetes etcd Keys - Exposu...

Mirantis Kubernetes Engine Panel - Detect

Mirantis Kubernetes Engine panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Mirantis Kubernetes Engine panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Mirantis Kubernetes Engine...

KubeView Dashboard - Detect

KubeView dashboard was detected. !/usr/bin/env python3 -- coding: utf-8 -- """KubeView dashboard was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'KubeView Dashboard - Detect', 'description': 'KubeView...

Kyocera Command Center RX ECOSYS M2035dn - Local File Inclusion Detection

Kyocera Command Center RX ECOSYS M2035dn is vulnerable to unauthenticated local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Kyocera Command Center RX ECOSYS M2035dn is vulnerable to unauthenticated local file inclusion.""" import re from kittysploit import from...

Label Studio - Sign-up Detect

Detects the presence of the Label Studio sign-up. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of the Label Studio sign-up.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Label Studio - Sign-up...

LaCie Login Panel - Detect

LaCie login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """LaCie login panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LaCie Login Panel - Detect', 'description': 'LaCi...

Laravel Clockwork - Sensitive Information Exposure Detection

Laravel Clockwork itsgoingd/clockwork was detected as enabled and publicly accessible. When left active in production, it exposes SQL queries, request data, session variables, mail logs, and application internals to any visitor. !/usr/bin/env python3 -- coding: utf-8 -- """Laravel Clockwork...

Laravel Debug Enabled Detection

Laravel with APPDEBUG set to true is prone to show verbose errors. !/usr/bin/env python3 -- coding: utf-8 -- """Laravel with APPDEBUG set to true is prone to show verbose errors.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info ...

Laravel Debug Info Leak Detection

This template can be used to detect a Laravel debug information leak by making a POST-based request. !/usr/bin/env python3 -- coding: utf-8 -- """This template can be used to detect a Laravel debug information leak by making a POST-based request.""" from kittysploit import from...

Laravel Horizon Dashboard - Unauthenticated Detection

Laravel Horizon Dashboard unauthenticated was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Laravel Horizon Dashboard unauthenticated was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Laravel...

Laravel log file publicly accessible Detection

The log file of this Laravel web app might reveal details on the inner workings of the app, possibly even tokens, credentials or personal information. !/usr/bin/env python3 -- coding: utf-8 -- """The log file of this Laravel web app might reveal details on the inner workings of the app, possibly...

Laravel Sanctum - Stateful Domain CSRF Misconfiguration Detection

Laravel Sanctum's SPA authentication uses cookie-based session authentication for first-party single-page applications. The /sanctum/csrf-cookie endpoint issues XSRF-TOKEN cookies to requesting origins. When SANCTUMSTATEFULDOMAINS is misconfigured with wildcard or overly permissive values, the...

Leantime - Detect

Detects a Leantime server, a project management system for non-project managers. !/usr/bin/env python3 -- coding: utf-8 -- """Detects a Leantime server, a project management system for non-project managers.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Leantime - Unfinished Installation Detection

Detected a Leantime instance identified with the setup installation page accessible at /install, enabling unauthenticated users to create the first administrator account and configure the database. !/usr/bin/env python3 -- coding: utf-8 -- """Detected a Leantime instance identified with the setup...

Lenovo Fan Power Controller Login Panel - Detect

Lenovo Fan Power Controller login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Lenovo Fan Power Controller login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Lenovo Fan Powe...

librechat - Config Exposure Detection

Detected the /api/config endpoint of the LibreChat web application was publicly accessible, potentially exposing internal configuration details. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the /api/config endpoint of the LibreChat web application was publicly accessible, potentially...

LibreNMS Login Panel - Detect

LibreNMS login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """LibreNMS login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LibreNMS Login Panel - Detect', 'description':...

LibreSpeed Panel - Detect

LibreSpeed is a very lightweight speed test implemented in Javascript, using XMLHttpRequest and Web Workers. !/usr/bin/env python3 -- coding: utf-8 -- """LibreSpeed is a very lightweight speed test implemented in Javascript, using XMLHttpRequest and Web Workers.""" from kittysploit import from...

Liferay /api/axis - API Exposed Detection

Detects Liferay /api/axis - API Exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Liferay /api/axis - API Exposed.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Liferay /api/axis - API Exposed...

Liferay /api/jsonws - API Exposed Detection

Liferay /api/jsonws - API is Exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Liferay /api/jsonws - API is Exposed.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Liferay /api/jsonws - API Exposed...

Liferay Login Panel - Detect

Liferay login panel was detected, !/usr/bin/env python3 -- coding: utf-8 -- """Liferay login panel was detected,.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Liferay Login Panel - Detect', 'description': 'Liferay...

Liferay - Local File Inclusion Detection

Liferay is vulnerable to local file inclusion in the I18n Servlet because it leaks information via sending an HTTP request to /language/resource;.js also .jsp works. !/usr/bin/env python3 -- coding: utf-8 -- """Liferay is vulnerable to local file inclusion in the I18n Servlet because it leaks...

Lighttpd Config File - File Disclosure Detection

Lighttpd Config file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Lighttpd Config file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Lighttpd Config File - File Disclosure Detection',...

Lighttpd Web Server - Detect

Detected servers running the Lighttpd web server by identifying the Server header in HTTP responses. !/usr/bin/env python3 -- coding: utf-8 -- """Detected servers running the Lighttpd web server by identifying the Server header in HTTP responses.""" from kittysploit import from...

Linksys Smart Wi-Fi Login Panel - Detect

Linksys Smart Wi-Fi login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Linksys Smart Wi-Fi login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Linksys Smart Wi-Fi Login Panel...

LinShare Login Panel - Detect

LinShare login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """LinShare login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LinShare Login Panel - Detect', 'description':...

Live Helper Chat Admin Login Panel - Detect

Live Helper Chat admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Live Helper Chat admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Live Helper Chat Admin...

Locust Exposure Detection

Locust is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Locust is exposed.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Locust Exposure Detection', 'description': 'Locust is exposed.', 'author':...

Looker Login Panel - Detect

Looker login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Looker login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Looker Login Panel - Detect', 'description': 'Looker logi...

Loxone Intercom Video Panel - Detect

Loxone Intercom Video panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Loxone Intercom Video panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Loxone Intercom Video Panel - Detect',...

Loxone WebInterface Panel - Detect

Detects Loxone WebInterface Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Loxone WebInterface Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Loxone WebInterface Panel - Detect'...

LuCi Login Panel - Detect

LuCi login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """LuCi login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LuCi Login Panel - Detect', 'description': 'LuCi login panel...

Lvmeng - UTS Disclosure Detection

Lvmeng UTS was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Lvmeng UTS was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Lvmeng - UTS Disclosure Detection', 'description': 'Lvmeng UTS was...

Magento Debug Log - Exposure Detection

Detected Magento debug.log file was publicly accessible. This file contained sensitive debugging information including full server paths, stack traces, customer activity, internal code paths, cache data, and cron job details. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Magento debug."""...

Magento Unprotected development files Detection

Magento version 1.9.2.x includes /dev directories or files that might reveal your passwords and other sensitive information. The /dev directories and files are not protected by default. According to Magento, "these tests are not supposed to end up on production servers". !/usr/bin/env python3 --...

Magnolia CMS Login Panel - Detect

Magnolia CMS login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Magnolia CMS login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Magnolia CMS Login Panel - Detect',...

Mailpit App - Information Disclosure Detection

Mailpit exposes the /api/v1/messages endpoint which can leak email metadata or full email content without authentication, leading to information disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Mailpit exposes the /api/v1/messages endpoint which can leak email metadata or full email conte...

MAMP - PHP Info Exposure Detection

Detected MAMP server was exposed phpinfo page, revealing sensitive PHP configuration, server paths, and environment variables. !/usr/bin/env python3 -- coding: utf-8 -- """Detected MAMP server was exposed phpinfo page, revealing sensitive PHP configuration, server paths, and envi.""" from...

ZOHO ManageEngine ADSelfService Plus - Detect

ZOHO ManageEngine ADSelfService panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ZOHO ManageEngine ADSelfService panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ZOHO ManageEngine...

ZOHO ManageEngine OpManager Panel - Detect

ZOHO ManageEngine OpManager panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ZOHO ManageEngine OpManager panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ZOHO ManageEngine OpManager...

MantisBT Login Panel - Detect

MantisBT login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """MantisBT login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MantisBT Login Panel - Detect', 'description':...

MantisBT Installation Exposure Detection

MantisBT is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """MantisBT is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Matrix Homeserver - Version Detection

Extract the Matrix homeserver name and version !/usr/bin/env python3 -- coding: utf-8 -- """Extract the Matrix homeserver name and version.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Matrix Homeserver - Version...

MetaView Explorer Installer Detection

MetaView Explorer is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """MetaView Explorer is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import...

MeTube Instance Detected

A MeTube instance was detected. !/usr/bin/env python3 -- coding: utf-8 -- """A MeTube instance was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MeTube Instance Detected', 'description': 'A MeTube instanc...

M-Files Web Login Panel - Detect

M-Files Web login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """M-Files Web login panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'M-Files Web Login Panel - Detect',...