mooSocial Installation - Exposure Detection

Detects mooSocial Installation - Exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects mooSocial Installation - Exposure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'mooSocial Installation - Exposure...

MPFTVC Admin Login Panel - Detect

MPFTVC admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """MPFTVC admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MPFTVC Admin Login Panel - Detect',...

MPSec ISG1000 - Local File Inclusion Detection

MPSec ISG1000 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """MPSec ISG1000 is vulnerable to local file inclusion.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MPSec...

Microsoft Exchange Autodiscover - Local Domain Exposure Detection

Microsoft Exchange is prone to a local domain exposure using the Autodiscover v2 endpoint. !/usr/bin/env python3 -- coding: utf-8 -- """Microsoft Exchange is prone to a local domain exposure using the Autodiscover v2 endpoint.""" import re from kittysploit import from lib.protocols.http.httpclien...

MyBB Login Panel - Detect

MyBB login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """MyBB login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MyBB Login Panel - Detect', 'description': 'MyBB login panel...

MySQL Conifg - Exposure Detection

Detects exposure of MySQL credentials, configuration, and command history via HTTP. Exposure of files such as .my.cnf and .mysqlhistory may lead to leakage of database passwords or SQL history, enabling attackers to compromise databases. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposu...

Mystic Stealer Panel - Detect

Mystic Stealer panel were detected. !/usr/bin/env python3 -- coding: utf-8 -- """Mystic Stealer panel were detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Mystic Stealer Panel - Detect', 'description':...

3CX Phone System Web Client Management Console - Panel Detect

3CX Phone System Web Client Management Console panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """3CX Phone System Web Client Management Console panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info ...

NagVis Login Panel - Detect

NagVis login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """NagVis login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'NagVis Login Panel - Detect', 'description': 'NagVis logi...

WordPress NativeChurch Theme - Local File Inclusion Detection

WordPress NativeChurch Theme is vulnerable to local file inclusion in the download.php file. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress NativeChurch Theme is vulnerable to local file inclusion in the download.""" from kittysploit import from lib.protocols.http.httpclient import...

NetAlert X Panel - Detect

NetAlert X panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """NetAlert X panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'NetAlert X Panel - Detect', 'description': 'NetAlert X...

NetMizer LogManagement System cmd.php - Remote Code Execution Detection

Remote Command Execution vulnerability in the NetMizer log management system cmd.php, and the attacker can execute the command by passing in the cmd parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Remote Command Execution vulnerability in the NetMizer log management system cmd.""" import ...

News Script Pro 2.4 - Cross-Site Scripting Detection

The attacker can send to victim a link containing a malicious URL in an email or instant message can perform a wide variety of actions, such as stealing the victim's session token or login credentials. !/usr/bin/env python3 -- coding: utf-8 -- """The attacker can send to victim a link containing ...

Nginx Admin Manager Login Panel - Detect

Nginx Admin Manager login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Nginx Admin Manager login panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Nginx Admin Manager...

Nginx Server - Local File Inclusion Detection

Nginx server is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Nginx server is vulnerable to local file inclusion.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Nginx...

NocoBase - Detect

NocoBase is an open source, extensibility-first, low-code platform for building business applications and enterprise solutions. !/usr/bin/env python3 -- coding: utf-8 -- """NocoBase is an open source, extensibility-first, low-code platform for building business applications and ente.""" from...

nopCommerce Installer - Detect

nopCommerce installer panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """nopCommerce installer panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'nopCommerce Installer - Detect',...

Nozomi Guardian Login Panel - Detect

Nozomi Guardian login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Nozomi Guardian login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Nozomi Guardian Login Panel - Detect',...

NPM .npmignore File Disclosure Detection

Detected NPM .npmignore configuration file, potentially exposing excluded files and project structure information. !/usr/bin/env python3 -- coding: utf-8 -- """Detected NPM .""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Nutanix Web Console Login Panel - Detect

Nutanix Web Console login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Nutanix Web Console login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Nutanix Web Console Login Panel...

Flock Safety Camera Admin Panel - Detect

Detected the Flock Safety camera admin panel. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the Flock Safety camera admin panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Flock Safety Camera Admin Panel...

Fortinet FortiAnalyzer - Login Panel Detection

Fortinet FortiAnalyzer is a centralised log management and analytics platform for Fortinet security devices. The web management console is commonly internet-exposed on ports 443, 10443, 9443, or 4443. !/usr/bin/env python3 -- coding: utf-8 -- """Fortinet FortiAnalyzer is a centralised log...

FortiOS Admin Login Panel - Detect

FortiOS admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """FortiOS admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'FortiOS Admin Login Panel - Detect',...

Fortinet FortiOS Management Interface Panel - Detect

Fortinet FortiOS Management interface panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Fortinet FortiOS Management interface panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Fortine...

Fortinet FortiSandbox Panel - Detect

Fortinet FortiSandbox login panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Fortinet FortiSandbox login panel was discovered.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Fortinet...

FOSSBilling - Installation Detection

FOSSBilling installation dashboard has been detected. !/usr/bin/env python3 -- coding: utf-8 -- """FOSSBilling installation dashboard has been detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'FOSSBilling -...

FreeScout Panel - Detect

FreeScout panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """FreeScout panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'FreeScout Panel - Detect', 'description': 'FreeScout panel...

FreshRSS Google Reader API Exposure Detection

Detected an exposed FreshRSS instance with the Google Reader API enabled, which could have allowed unauthorized access to RSS feeds and user-related data via accessible API endpoints. !/usr/bin/env python3 -- coding: utf-8 -- """Detected an exposed FreshRSS instance with the Google Reader API...

FreshRSS Fever API - Exposure Detection

Detected an exposed FreshRSS instance with the Fever API enabled, which could allow unauthorized access to RSS feed data and user-related information via accessible Fever-compatible API endpoints. !/usr/bin/env python3 -- coding: utf-8 -- """Detected an exposed FreshRSS instance with the Fever AP...

FreshRSS - Installation Detection

FreshRSS Installation panel has been exposed. !/usr/bin/env python3 -- coding: utf-8 -- """FreshRSS Installation panel has been exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'FreshRSS - Installation...

Frigate NVR - API Exposure Detection

Detected an exposed Frigate NVR API, potentially allowing unauthorized access to camera feeds, internal network configuration, and MQTT credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Detected an exposed Frigate NVR API, potentially allowing unauthorized access to camera feeds, internal...

Froxlor Server Management Login Panel - Detect

Froxlor Server Management login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Froxlor Server Management login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Froxlor Server...

Atom remote-ssh ftpconfig Exposure Detection

Created by remote-ssh for Atom, contains SFTP/SSH server details and credentials !/usr/bin/env python3 -- coding: utf-8 -- """Created by remote-ssh for Atom, contains SFTP/SSH server details and credentials.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Financial Transaction Manager Login Panel - Detect

Financial Transaction Manager login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Financial Transaction Manager login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Financial...

Fuel CMS Login Panel - Detect

Fuel CMS login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Fuel CMS login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Fuel CMS Login Panel - Detect', 'description': 'Fuel...

Fuji Xerox Printer Panel - Detect

Fuji Xerox printer panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Fuji Xerox printer panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Fuji Xerox Printer Panel - Detect',...

FusionAuth Admin Panel - Detect

Detects FusionAuth Admin Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects FusionAuth Admin Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'FusionAuth Admin Panel - Detect',...

Ganglia Cluster Dashboard - Detect

Ganglia Cluster dashboard was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ganglia Cluster dashboard was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ganglia Cluster Dashboard - Detect',...

Google Cloud Default Config - Detect

Google Cloud default configuration was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Google Cloud default configuration was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Google Cloud Default Conf...

GeniusOcean Installer Exposure Detection

GeniusOcean is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """GeniusOcean is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

GEMweb Plus 500 Login Panel - Detect

GEMweb Plus 500 login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """GEMweb Plus 500 login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GEMweb Plus 500 Login Panel - Detect',...

GeoWebServer Detector Panel - Detect

GeoWebServer Detector panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """GeoWebServer Detector panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GeoWebServer Detector Panel - Detect',...

GE Proficy WebSpace - Login Panel Detection

GE Proficy WebSpace is a thin-client delivery platform for GE Proficy HMI/SCADA iFIX, CIMPLICITY applications over the web. It exposes industrial HMI screens via browser on TCP/491 by default. The Server header "WebSocket++/0.7.0" is a unique indicator. !/usr/bin/env python3 -- coding: utf-8 --...

GitHub Enterprise - Encrypted SAML Detection

This template checks if Encrypted SAML Security Assertion Markup Language is enabled on a GitHub Enterprise instance. !/usr/bin/env python3 -- coding: utf-8 -- """This template checks if Encrypted SAML Security Assertion Markup Language is enabled on a GitHub Enterprise .""" from kittysploit impo...

GilaCMS Detect

Detects GilaCMS Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects GilaCMS Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GilaCMS Detect', 'description': 'Detects GilaCMS Detect.', 'author':...

Gitea Public Repository - Exposure Detection

Detected publicly accessible Gitea instances exposing repository listings and user information without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Detected publicly accessible Gitea instances exposing repository listings and user information without authent.""" from kittysploit...

GitHub Debug Page Detection

Detects GitHub Debug Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects GitHub Debug Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GitHub Debug Page Detection', 'description': 'Detects GitHub Debug...

GitLab Instance Explore - Detect

This template checks for GitLab instances by verifying if /explore and /api/v4/projects endpoints are accessible with a 200 response. !/usr/bin/env python3 -- coding: utf-8 -- """This template checks for GitLab instances by verifying if /explore and /api/v4/projects endpoints are accessib.""" fro...

Uninitialized GitLab instances Detection

Prior to version 14, GitLab installations required a root password to be set via the web UI. If the administrator skipped this step, any visitor could set a password and control the instance. !/usr/bin/env python3 -- coding: utf-8 -- """Prior to version 14, GitLab installations required a root...

Glimpse Diagnostics - Sensitive Data Exposure Detection

Detected Glimpse diagnostics endpoint. Glimpse is a .NET diagnostics tool that reveals detailed request information, server configuration, SQL queries, connection strings, and session data. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Glimpse diagnostics endpoint.""" from kittysploit...