Shell In A Box - Detect

Shell In A Box implements a web server that can export arbitrary command line tools to a web based terminal emulator !/usr/bin/env python3 -- coding: utf-8 -- """Shell In A Box implements a web server that can export arbitrary command line tools to a web based terminal em.""" from kittysploit...

SHOOWBIZ - Cross Site Scripting Detection

Cross-Site Scripting, is a type of security vulnerability commonly found in web applications. It occurs when an attacker injects malicious scripts typically written in JavaScript into web pages viewed by other users. !/usr/bin/env python3 -- coding: utf-8 -- """Cross-Site Scripting, is a type of...

Shopizer Detection

Detects Shopizer Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Shopizer Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Shopizer Detection', 'description': 'Detects Shopizer Detection.',...

SHOUTcast Server Panel - Detect

SHOUTcast Server panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SHOUTcast Server panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SHOUTcast Server Panel - Detect', 'description':...

ShowDoc Panel Detection

ShowDoc panel was detected. ShowDoc was a tool for documenting APIs and interfaces. !/usr/bin/env python3 -- coding: utf-8 -- """ShowDoc panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ShowDoc Pan...

Siemens Logo! 8 Web - Panel Detection

Siemens Logo! 8 Web Login Panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Siemens Logo! 8 Web Login Panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Siemens Logo! 8 Web - Panel...

SillyTavern Panel - Detect

SillyTavern was detected. SillyTavern is a character-based AI roleplay and chat frontend that connects to local or remote LLM backends. Exposed instances may allow unauthenticated access to AI models and conversation history. !/usr/bin/env python3 -- coding: utf-8 -- """SillyTavern was detected."...

Signet Explorer Dashboard - Detect

Signet Explorer Dashboard was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Signet Explorer Dashboard was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Signet Explorer Dashboard - Detect',...

Silverback MDM - Detection

Detects Silverback MDM - Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Silverback MDM - Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.osint.faviconhash import shodanmmh3 class ModuleScanner, Httpclient: info = 'name':...

Sitecore Admin Login Panel - Detect

Sitecore admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Sitecore admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sitecore Admin Login Panel - Detect',...

Sitecore 9.3 - Webroot File Read Detection

SiteCore 9.3 is vulnerable to LFI. !/usr/bin/env python3 -- coding: utf-8 -- """SiteCore 9.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sitecore 9.3 - Webroot File Read Detection', 'description': 'SiteCore 9.3 is...

Sitefinity Login Detection

This template identifies the Sitefinity login page. !/usr/bin/env python3 -- coding: utf-8 -- """This template identifies the Sitefinity login page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sitefinity Login...

Skeepers Login Panel - Detect

Skeepers login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Skeepers login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Skeepers Login Panel - Detect', 'description':...

Slack Webhook URL Detection

Detects Slack Webhook URL. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Slack Webhook URL.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Slack Webhook URL Detection', 'description': 'Detects Slack...

Senayan Library Management System v9.5.2 (Bulian) - Cross-Site Scripting Detection

SLiMS 9.5.2 Bulian vulnerable to Cross-Site Scripting in index.php. When injected, website will execute the payload repeatedly !/usr/bin/env python3 -- coding: utf-8 -- """SLiMS 9.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: inf...

Slims CMS - Detect

Detects Senayan Library Management System SLiMS CMS !/usr/bin/env python3 -- coding: utf-8 -- """Detects Senayan Library Management System SLiMS CMS.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Slims CMS - Detect...

Slocum Fleet Mission Control Login Panel - Detect

Slocum Fleet Mission Control login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Slocum Fleet Mission Control login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Slocum Fleet...

Webbdesign SL-Studio - Local File Inclusion Detection

Webbdesign SL-Studio is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Webbdesign SL-Studio is vulnerable to local file inclusion.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

SmarterStats Setup Exposure Detection

SmarterStats Setup is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """SmarterStats Setup is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SmarterStats Setup Exposure Detection', 'description':...

SmokePing Latency Page for Network Latency Grapher Detection

SmokePing Latency Page is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """SmokePing Latency Page is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SmokePing Latency Page for Network Latency Grapher...

SMTP Credentials Exposure - Detection

Detects exposed SMTP credentials username and password in a webpage's HTML or JavaScript source code. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed SMTP credentials username and password in a webpage's HTML or JavaScript source code.""" from kittysploit import from...

Snipe-IT Panel - Detect

Snipe-IT panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Snipe-IT panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Snipe-IT Panel - Detect', 'description': 'Snipe-IT panel was...

SolarView Compact 6.00 - Cross-Site Scripting Detection

SolarView Compact 6.00 contains a cross-site scripting vulnerability via fname at /SolarImage.php. !/usr/bin/env python3 -- coding: utf-8 -- """SolarView Compact 6.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Solr - Admin Page Access Detection

Solr's admin page was able to be accessed with no authentication requirements in place. !/usr/bin/env python3 -- coding: utf-8 -- """Solr's admin page was able to be accessed with no authentication requirements in place.""" from kittysploit import from lib.protocols.http.httpclient import...

SonicWall Management Admin Login Panel - Detect

SonicWall Management admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SonicWall Management admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SonicWall...

Sonicwall SSLVPN - Remote Code Execution (ShellShock) Detection

Sonicwall SSLVPN contains a 'ShellShock' vulnerability which allows remote unauthenticated attackers to execute arbitrary commands. !/usr/bin/env python3 -- coding: utf-8 -- """Sonicwall SSLVPN contains a 'ShellShock' vulnerability which allows remote unauthenticated attackers to execut.""" impor...

SonicWall Network Security Login - Detect

SonicWall Network Security Login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SonicWall Network Security Login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SonicWall Network...

SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x (PHPTail) Unauthenticated File Disclosure Detection

The application suffers from an unauthenticated file disclosure vulnerability. Using the 'file' GET parameter attackers can disclose arbitrary files on the affected device and disclose sensitive and system information. !/usr/bin/env python3 -- coding: utf-8 -- """The application suffers from an...

Unauthenticated Spark WebUI Detection

Spark WebUI is exposed to external users without any authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Spark WebUI is exposed to external users without any authentication.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

Splunk Enterprise Login Panel - Detect

Splunk Enterprise login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Splunk Enterprise login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Splunk Enterprise Login Panel -...

Spring Boot AuditEvents Actuator Panel - Detect

Spring Boot Auditevents Actuator panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Spring Boot Auditevents Actuator panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Spring Boot...

Detect Springboot Dump Actuator

Performs a thread dump !/usr/bin/env python3 -- coding: utf-8 -- """Performs a thread dump.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect Springboot Dump Actuator', 'description': 'Performs a thread dump',...

Detects Springboot HTTP Exchanges Actuator

The exposed httpexchanges endpoint can leak recent HTTP request/response data, including URIs, headers, and status codes. !/usr/bin/env python3 -- coding: utf-8 -- """The exposed httpexchanges endpoint can leak recent HTTP request/response data, including URIs, headers, and st.""" from kittysploi...

Detect Springboot httptrace

View recent HTTP requests and responses !/usr/bin/env python3 -- coding: utf-8 -- """View recent HTTP requests and responses.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect Springboot httptrace', 'description...

Detects Springboot Jolokia Actuator

Springboot Jolokia Actuator is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Springboot Jolokia Actuator is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detects Springboot Jolokia Actuator',...

Springboot Liquidbase API Detection

This liquibase endpoint provides information about database changes !/usr/bin/env python3 -- coding: utf-8 -- """This liquibase endpoint provides information about database changes.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: in...

Spring Boot Actuator SBOM - Exposure Detection

Spring Boot Actuator SBOM endpoint was detected and is exposed without authentication. The endpoint returns a Software Bill of Materials typically CycloneDX or SPDX JSON listing every dependency and version shipped with the application, which lets an attacker enumerate the exact library inventory...

Springboot Actuator startup Detection

The startup endpoint provides information about the application’s startup sequence. !/usr/bin/env python3 -- coding: utf-8 -- """The startup endpoint provides information about the application’s startup sequence.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...

Spring Boot `X-Application-Context` Header Exposure Detection

Detected the presence of the X-Application-Context header in HTTP responses, which can expose sensitive application context information. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the presence of the X-Application-Context header in HTTP responses, which can expose sensitive applic."""...

Spring Eureka Exposure Detection

Spring Eureka is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Spring Eureka is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Spring Eureka Exposure Detection', 'description': 'Spring Eureka is...

SQLite History - Exposure Detection

Detects exposed .sqlitehistory files. These files contain SQLite command history, including executed queries, table names, and potentially sensitive data that was queried or inserted. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed .""" import re from kittysploit import from...

Squid End-of-Life - Detect

Detected Squid proxy versions that have reached End-of-Life EOL and no longer receive security updates. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Squid proxy versions that have reached End-of-Life EOL and no longer receive security updates.""" from kittysploit import from...

SquirrelMail 1.2.11 - Local File Inclusion Detection

SquirrelMail 1.2.11 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """SquirrelMail 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SquirrelMail 1.2.11 - Local File...

StackStorm Web UI - Panel Detect

StackStorm Web UI interface was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """StackStorm Web UI interface was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'StackStorm Web UI - Panel Detect',...

StrongShop Installer - Exposure Detection

Detects the exposure of the StrongShop installer page, which could allow unauthorized setup or reinstallation of the application. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the exposure of the StrongShop installer page, which could allow unauthorized setup or reinstallation .""" from...

SugarCRM Login Panel - Detect

SugarCRM login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SugarCRM login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SugarCRM Login Panel - Detect', 'description':...

SugarCRM Exposed Installation Detection

SugarCRM is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """SugarCRM is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

SUNGROW Logger1000 Panel - Detect

SUNGROW Solar Energy Inverter Monitoring Devices Logger1000 panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SUNGROW Solar Energy Inverter Monitoring Devices Logger1000 panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

SuperAGI Panel - Detect

SuperAGI panel was detected. SuperAGI was an open-source autonomous AI agent platform that enables building, managing, and running AI agents. Exposed instances may allow unauthorized access to agent configurations and execution environments. !/usr/bin/env python3 -- coding: utf-8 -- """SuperAGI...

Supermicro BMC Login Panel - Detect

Supermicro BMC login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Supermicro BMC login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Supermicro BMC Login Panel - Detect',...