Microsoft SharePoint - Master Page Disclosure Detection

Detected exposed SharePoint Master Page endpoints. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed SharePoint Master Page endpoints.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Microsoft SharePoint ...

Sharp Multifunction Printers - Local File Inclusion Detection

It was observed that Sharp printers are vulnerable to a local file inclusion without authentication. Any attacker can read any file located in the printer. !/usr/bin/env python3 -- coding: utf-8 -- """It was observed that Sharp printers are vulnerable to a local file inclusion without...

Shell In A Box - Detect

Shell In A Box implements a web server that can export arbitrary command line tools to a web based terminal emulator !/usr/bin/env python3 -- coding: utf-8 -- """Shell In A Box implements a web server that can export arbitrary command line tools to a web based terminal em.""" from kittysploit...

SHOUTcast Server Panel - Detect

SHOUTcast Server panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SHOUTcast Server panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SHOUTcast Server Panel - Detect', 'description':...

ShowDoc Panel Detection

ShowDoc panel was detected. ShowDoc was a tool for documenting APIs and interfaces. !/usr/bin/env python3 -- coding: utf-8 -- """ShowDoc panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ShowDoc Pan...

Siemens Logo! 8 Web - Panel Detection

Siemens Logo! 8 Web Login Panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Siemens Logo! 8 Web Login Panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Siemens Logo! 8 Web - Panel...

Signet Explorer Dashboard - Detect

Signet Explorer Dashboard was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Signet Explorer Dashboard was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Signet Explorer Dashboard - Detect',...

Sitecore Admin Login Panel - Detect

Sitecore admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Sitecore admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sitecore Admin Login Panel - Detect',...

Sitecore 9.3 - Webroot File Read Detection

SiteCore 9.3 is vulnerable to LFI. !/usr/bin/env python3 -- coding: utf-8 -- """SiteCore 9.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sitecore 9.3 - Webroot File Read Detection', 'description': 'SiteCore 9.3 is...

Sitefinity Login Detection

This template identifies the Sitefinity login page. !/usr/bin/env python3 -- coding: utf-8 -- """This template identifies the Sitefinity login page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sitefinity Login...

Skeepers Login Panel - Detect

Skeepers login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Skeepers login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Skeepers Login Panel - Detect', 'description':...

Slack Webhook URL Detection

Detects Slack Webhook URL. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Slack Webhook URL.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Slack Webhook URL Detection', 'description': 'Detects Slack...

Senayan Library Management System v9.5.2 (Bulian) - Cross-Site Scripting Detection

SLiMS 9.5.2 Bulian vulnerable to Cross-Site Scripting in index.php. When injected, website will execute the payload repeatedly !/usr/bin/env python3 -- coding: utf-8 -- """SLiMS 9.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: inf...

Slims CMS - Detect

Detects Senayan Library Management System SLiMS CMS !/usr/bin/env python3 -- coding: utf-8 -- """Detects Senayan Library Management System SLiMS CMS.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Slims CMS - Detect...

Slocum Fleet Mission Control Login Panel - Detect

Slocum Fleet Mission Control login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Slocum Fleet Mission Control login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Slocum Fleet...

Webbdesign SL-Studio - Local File Inclusion Detection

Webbdesign SL-Studio is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Webbdesign SL-Studio is vulnerable to local file inclusion.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

SmarterStats Setup Exposure Detection

SmarterStats Setup is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """SmarterStats Setup is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SmarterStats Setup Exposure Detection', 'description':...

SmokePing Latency Page for Network Latency Grapher Detection

SmokePing Latency Page is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """SmokePing Latency Page is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SmokePing Latency Page for Network Latency Grapher...

SMTP Credentials Exposure - Detection

Detects exposed SMTP credentials username and password in a webpage's HTML or JavaScript source code. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed SMTP credentials username and password in a webpage's HTML or JavaScript source code.""" from kittysploit import from...

SolarView Compact 6.00 - Cross-Site Scripting Detection

SolarView Compact 6.00 contains a cross-site scripting vulnerability via fname at /SolarImage.php. !/usr/bin/env python3 -- coding: utf-8 -- """SolarView Compact 6.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Solr - Admin Page Access Detection

Solr's admin page was able to be accessed with no authentication requirements in place. !/usr/bin/env python3 -- coding: utf-8 -- """Solr's admin page was able to be accessed with no authentication requirements in place.""" from kittysploit import from lib.protocols.http.httpclient import...

SonicWall Management Admin Login Panel - Detect

SonicWall Management admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SonicWall Management admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SonicWall...

Sonicwall SSLVPN - Remote Code Execution (ShellShock) Detection

Sonicwall SSLVPN contains a 'ShellShock' vulnerability which allows remote unauthenticated attackers to execute arbitrary commands. !/usr/bin/env python3 -- coding: utf-8 -- """Sonicwall SSLVPN contains a 'ShellShock' vulnerability which allows remote unauthenticated attackers to execut.""" impor...

SonicWall Network Security Login - Detect

SonicWall Network Security Login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SonicWall Network Security Login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SonicWall Network...

Unauthenticated Spark WebUI Detection

Spark WebUI is exposed to external users without any authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Spark WebUI is exposed to external users without any authentication.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

Splunk Enterprise Login Panel - Detect

Splunk Enterprise login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Splunk Enterprise login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Splunk Enterprise Login Panel -...

Detect Springboot Dump Actuator

Performs a thread dump !/usr/bin/env python3 -- coding: utf-8 -- """Performs a thread dump.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect Springboot Dump Actuator', 'description': 'Performs a thread dump',...

Spring Boot Actuator SBOM - Exposure Detection

Spring Boot Actuator SBOM endpoint was detected and is exposed without authentication. The endpoint returns a Software Bill of Materials typically CycloneDX or SPDX JSON listing every dependency and version shipped with the application, which lets an attacker enumerate the exact library inventory...

Springboot Actuator startup Detection

The startup endpoint provides information about the application’s startup sequence. !/usr/bin/env python3 -- coding: utf-8 -- """The startup endpoint provides information about the application’s startup sequence.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...

Spring Boot `X-Application-Context` Header Exposure Detection

Detected the presence of the X-Application-Context header in HTTP responses, which can expose sensitive application context information. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the presence of the X-Application-Context header in HTTP responses, which can expose sensitive applic."""...

Spring Eureka Exposure Detection

Spring Eureka is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Spring Eureka is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Spring Eureka Exposure Detection', 'description': 'Spring Eureka is...

SQLite History - Exposure Detection

Detects exposed .sqlitehistory files. These files contain SQLite command history, including executed queries, table names, and potentially sensitive data that was queried or inserted. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed .""" import re from kittysploit import from...

Squid End-of-Life - Detect

Detected Squid proxy versions that have reached End-of-Life EOL and no longer receive security updates. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Squid proxy versions that have reached End-of-Life EOL and no longer receive security updates.""" from kittysploit import from...

SquirrelMail 1.2.11 - Local File Inclusion Detection

SquirrelMail 1.2.11 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """SquirrelMail 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SquirrelMail 1.2.11 - Local File...

StackStorm Web UI - Panel Detect

StackStorm Web UI interface was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """StackStorm Web UI interface was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'StackStorm Web UI - Panel Detect',...

StrongShop Installer - Exposure Detection

Detects the exposure of the StrongShop installer page, which could allow unauthorized setup or reinstallation of the application. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the exposure of the StrongShop installer page, which could allow unauthorized setup or reinstallation .""" from...

SugarCRM Login Panel - Detect

SugarCRM login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SugarCRM login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SugarCRM Login Panel - Detect', 'description':...

SugarCRM Exposed Installation Detection

SugarCRM is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """SugarCRM is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

SUNGROW Logger1000 Panel - Detect

SUNGROW Solar Energy Inverter Monitoring Devices Logger1000 panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SUNGROW Solar Energy Inverter Monitoring Devices Logger1000 panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

SuperAGI Panel - Detect

SuperAGI panel was detected. SuperAGI was an open-source autonomous AI agent platform that enables building, managing, and running AI agents. Exposed instances may allow unauthorized access to agent configurations and execution environments. !/usr/bin/env python3 -- coding: utf-8 -- """SuperAGI...

Supermicro BMC Login Panel - Detect

Supermicro BMC login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Supermicro BMC login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Supermicro BMC Login Panel - Detect',...

Surreal ToDo 0.6.1.2 - Local File Inclusion Detection

Surreal ToDo 0.6.1.2 is vulnerable to local file inclusion via index.php and the content parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Surreal ToDo 0.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name'...

SVN wc.db File Exposure Detection

SVN wc.db file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """SVN wc.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SVN wc.db File Exposure Detection', 'description': 'SVN wc.db file is exposed.', 'author...

Switching Protocol Detection

Detects Switching Protocol Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Switching Protocol Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Switching Protocol Detection', 'description':...

Symfony _fragment - Detect

Symfony servers support a "/fragment" command that allows clients to provide custom PHP commands and return the HTML output. !/usr/bin/env python3 -- coding: utf-8 -- """Symfony servers support a "/fragment" command that allows clients to provide custom PHP commands and return t.""" from...

Synapse Mobility Login Panel - Detect

Synapse Mobility login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Synapse Mobility login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Synapse Mobility Login Panel - Detect...

Symmetricom SyncServer Panel - Detect

Detects Symmetricom SyncServer Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Symmetricom SyncServer Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Symmetricom SyncServer Panel ...

Synway SMG Gateway 9-2radius.php - Remote Command Execution Detection

Synway SMG Gateway Management Software contains a remote command execution vulnerability in 9-2radius.php, where the radiusaddress parameter is passed to a system call without sanitization. This allows unauthenticated attackers to execute arbitrary commands on the server. !/usr/bin/env python3 --...

SysAid Login Panel - Detect

Detects the presence of a SysAid Help Desk Software login panel by identifying characteristic login pages, favicon hash, and system-specific content. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of a SysAid Help Desk Software login panel by identifying characteristic login...

Tactical RMM Login Panel - Detect

Tactical RMM login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Tactical RMM login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tactical RMM Login Panel - Detect',...