ChurchCRM - Setup Exposure Detection

ChurchCRM setup is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """ChurchCRM setup is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ChurchCRM - Setup Exposure Detection', 'description': 'ChurchCRM...

Cisco Finesse - Detect

Detected Cisco Finesse application and extracted version information from multiple sources. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Cisco Finesse application and extracted version information from multiple sources.""" from kittysploit import from lib.protocols.http.httpclient import...

Cisco Prime License Manager - Detect

Detected exposed Cisco Prime License Manager portals !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed Cisco Prime License Manager portals.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cisco Prime...

Cisco TelePresence MCU Login Panel - Detect

Cisco TelePresence MCU login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Cisco TelePresence MCU login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cisco TelePresence MCU...

Cisco Unified Communications Self-Service User Portal - Detection

Detected the presence of the Cisco Unified Communications User Management Panel. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the presence of the Cisco Unified Communications User Management Panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Citrix ADC Gateway Login Panel - Detect

Citrix ADC Gateway login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Citrix ADC Gateway login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Citrix ADC Gateway Login Panel -...

Claris FileMaker Server Admin Console - Detect

Claris FileMaker Server Admin Console panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Claris FileMaker Server Admin Console panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Claris...

Clave Login Panel - Detect

Clave login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Clave login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Clave Login Panel - Detect', 'description': 'Clave login...

ClearML Panel - Detect

ClearML was detected. ClearML is an open-source MLOps platform for experiment tracking, model management, and pipeline orchestration. Exposed instances may allow access to ML experiments, models, and infrastructure configurations. !/usr/bin/env python3 -- coding: utf-8 -- """ClearML was...

Cleo Technology - Detect

This template detects Cleo technologies, including VLTrader, Harmony, and LexiCom, by inspecting response headers.It also extracts version information for each identified technology. !/usr/bin/env python3 -- coding: utf-8 -- """This template detects Cleo technologies, including VLTrader, Harmony,...

Silverlight cross-domain policy Detection

Detects Silverlight cross-domain policy. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Silverlight cross-domain policy.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Silverlight cross-domain policy Detection...

Cloud Config File Exposure Detection

Cloud Config file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Cloud Config file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cloud Config File Exposure Detection', 'description': 'Cloud...

Cockpit Project Login Panel - Detect

Cockpit Project products was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Cockpit Project products was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cockpit Project Login Panel - Detect',...

Adobe ColdFusion - Cross-Site Scripting Detection

Adobe ColdFusion debug page contains a cross-site scripting vulnerability when the application is running on a remote host. An attacker can execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...

Compal CH7465LG Login Panel - Detect

Compal CH7465LG login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Compal CH7465LG login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Compal CH7465LG Login Panel - Detect',...

Concourse CI Login Panel - Detect

Concourse CI login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Concourse CI login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Concourse CI Login Panel - Detect',...

Drupal 7 Elfinder - Unauthenticated Connector Exposure Detection

Identifies Drupal sites with the elfinder library installed, which could be vulnerable to unrestricted file upload through the connector.php file.When this component is detected, the site may be vulnerable to remote code execution attacks via PHP file uploads.This template only detects the presen...

Kong Manager OSS/Admin - Exposure Detection

Exposed Kong Manager OSS/Admin interface accessible without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Exposed Kong Manager OSS/Admin interface accessible without authentication.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Apache JMeter Dashboard Login Panel - Detect

Detects the Apache JMeter Dashboard web UI distinct title and assets. !/usr/bin/env python3 -- coding: utf-8 -- """Apache JMeter Dashboard login panel detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "Apache...

CPPPO Ethernet/IP CIP Honeypot Default Configuration - Detect

Detected devices responding with the default configuration signature of the CPPPO Python-based Ethernet/IP CIP parser honeypot.This indicates systems likely running the default Conpot honeypot configuration for ICS using the Common Industrial Protocol CIP over Ethernet/IP. !/usr/bin/env python3 -...

SSDP / UPnP Detection

Sends a unicast SSDP M-SEARCH to detect UPnP devices on UDP 1900. !/usr/bin/env python3 -- coding: utf-8 -- """Detect SSDP / UPnP responders.""" from kittysploit import from lib.protocols.ics.icsscannerclient import Icsscannerclient from lib.scanner.ssdp.detectors import probessdp class...

vBulletin Detect

vBulletin is a proprietary forum and community publishing software written in PHP. !/usr/bin/env python3 -- coding: utf-8 -- """vBulletin is a proprietary forum and community publishing software written in PHP.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Google A2A Agent Card - Enumeration Detection

Detected exposed Google Agent-to-Agent protocol agent cards. The agent-card.json file advertises an AI agent's capabilities, supported skills, authentication requirements, and endpoint URLs. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed Google Agent-to-Agent protocol agent cards."...

aaPanel Detection

Detects aaPanel Linux management panel login interface. !/usr/bin/env python3 -- coding: utf-8 -- """Detect aaPanel Linux management panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "aaPanel Detection",...

Acrolinx Dashboard Detection

An Acrolinx Analytics dashboard was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An Acrolinx Analytics dashboard was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Acrolinx Dashboard Detection',...

Apache ActiveMQ Exposure Detection

An Apache ActiveMQ implementation was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """An Apache ActiveMQ implementation was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache ActiveMQ Exposur...

ACTi-Video Monitoring - Local File Inclusion Detection

ACTI video surveillance has loopholes in reading any files !/usr/bin/env python3 -- coding: utf-8 -- """ACTI video surveillance has loopholes in reading any files.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Adapt Authoring Tool - Panel Detection

Login panel for adapt was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Login panel for adapt was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Adapt Authoring Tool - Panel Detection',...

Jolokia write to RCE valve Detection

RCE in Jolokia 1.7.1 using AccesLogValve !/usr/bin/env python3 -- coding: utf-8 -- """RCE in Jolokia 1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Jolokia write to RCE valve Detection', 'description': 'RCE in...

Expect-CT Header - Misconfigured Detection

Detected misconfigured Expect-CT headers: max-age is 0 ineffective and enforce directive is missing !/usr/bin/env python3 -- coding: utf-8 -- """Detected misconfigured Expect-CT headers: max-age is 0 ineffective and enforce directive is missing.""" from kittysploit import from...

Marimo Panel - Detect

Marimo is an open-source reactive Python notebook and app framework that replaces Jupyter with git-friendly, reproducible notebooks. !/usr/bin/env python3 -- coding: utf-8 -- """Marimo is an open-source reactive Python notebook and app framework that replaces Jupyter with git-friendly, r.""" from...

Lotus Domino Version Extractor Detection

Detects Lotus Domino Version Extractor. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Lotus Domino Version Extractor.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Lotus Domino Version Extractor...

Roundcube webmail Detection

Detects Roundcube webmail. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Roundcube webmail.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Roundcube webmail Detection', 'description': 'Detects...

Accueil WAMPSERVER Configuration Page - Detect

Accueil WAMPSERVER configuration page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Accueil WAMPSERVER configuration page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Accueil WAMPSERVER...

Ace Admin Dashboard - Detect

Ace Admin dashboard page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ace Admin dashboard page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ace Admin Dashboard - Detect', 'description':...

Ackee Panel Detection

Detects Ackee self-hosted analytics login panels. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Ackee analytics panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "Ackee Panel Detection", "description":...

Let's Encrypt - Cross-Site Scripting Detection

Let's Encrypt contains a cross-site scripting vulnerability when using the the ACME protocol to issue SSL certificates. !/usr/bin/env python3 -- coding: utf-8 -- """Let's Encrypt contains a cross-site scripting vulnerability when using the the ACME protocol to issue SSL cert.""" from kittysploit...

Action Controller Exception - Page Detection

Detects Action Controller Exception - Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Action Controller Exception - Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Action Controller Exception - Page...

ActiveAdmin Admin Dasboard Exposure Detection

An ActiveAdmin Admin dashboard was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """An ActiveAdmin Admin dashboard was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ActiveAdmin Admin Dasboard...

ACTi Video Monitoring Panel - Detection

Detects ACTi Video Monitoring Panel - Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects ACTi Video Monitoring Panel - Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ACTi Video Monitoring Pan...

Acunetix Login Panel Detection

An Acunetix login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An Acunetix login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Acunetix Login Panel Detection', 'description':...

Xceedium Xsuite - read_sessionlog LFI Detection

Detects Xceedium Xsuite LFI via /opm/readsessionlog.php?logFile=....//etc/passwd. !/usr/bin/env python3 -- coding: utf-8 -- """Xceedium Xsuite readsessionlog.php LFI CVE-2015-4666.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

NUUO Camera <=20250203 - OS Command Injection Detection

NUUO Camera up to 20250203 contains a command injection caused by manipulation of the 'log' argument in /handleconfig.php, letting remote attackers execute arbitrary commands, exploit requires remote access. !/usr/bin/env python3 -- coding: utf-8 -- """NUUO Camera up to 20250203 contains a comman...

Cloudflare Speedtest - Detect

Detected the exposed default page of the Cloudflare Speedtest service. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the exposed default page of the Cloudflare Speedtest service.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclien...

Cloudlog Panel - Detect

Cloudlog panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Cloudlog panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cloudlog Panel - Detect', 'description': 'Cloudlog panel was...

Cloudphysician RADAR Login Panel - Detect

Cloudphysician RADAR login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Cloudphysician RADAR login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cloudphysician RADAR Login...

Cluster Overview Trino - Panel Detection

Cluster Overview Trino Login Panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Cluster Overview Trino Login Panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cluster Overview Trin...

CmsEasy crossall_act - SQL Injection Detection

CmsEasy crossallact.php SQL Injection Vulnerability. CmsEasy has a SQL injection vulnerability. Any SQL command can be executed by encrypting the SQL statement in the file service.php. !/usr/bin/env python3 -- coding: utf-8 -- """CmsEasy crossallact.""" from kittysploit import from...

Exposed Cobbler Directories Detection

Searches for exposed Cobbler Directories !/usr/bin/env python3 -- coding: utf-8 -- """Searches for exposed Cobbler Directories.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Exposed Cobbler Directories Detection',...

Cobbler Version Detection

Obtain cobbler version information !/usr/bin/env python3 -- coding: utf-8 -- """Obtain cobbler version information.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cobbler Version Detection', 'description': 'Obtain...