Memcached stats disclosure Detection

Memcached stats is used to return server statistics such as PID, version, connections, etc. !/usr/bin/env python3 -- coding: utf-8 -- """Memcached stats is used to return server statistics such as PID, version, connections, etc.""" import socket from kittysploit import from...

MongoDB - Unauthenticated Access Detection

MongoDB was able to be accessed with no password. Note that MongoDB does not require a password by default. !/usr/bin/env python3 -- coding: utf-8 -- """MongoDB was able to be accessed with no password.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import...

Network Management Card FTP Service - Detect

Network Management Card FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Network Management Card FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info =...

OpenDreambox FTP Service - Detect

OpenDreambox FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """OpenDreambox FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'OpenDreambox F...

Oracle Internet File System FTP Service - Detect

Oracle Internet File System FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Oracle Internet File System FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient:...

Pablo's FTP Service - Detect

Pablo's FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Pablo's FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': "Pablo's FTP Service -...

ProFTPD Server Detect

The File Transfer Protocol FTP is a standard network protocol used to transfer computer files between a client and server on a computer network. !/usr/bin/env python3 -- coding: utf-8 -- """The File Transfer Protocol FTP is a standard network protocol used to transfer computer files between a...

SAP Dispatcher - Detect

The SAP Dispatcher is the central process that manages communication between user requests and work processes. !/usr/bin/env python3 -- coding: utf-8 -- """The SAP Dispatcher is the central process that manages communication between user requests and work processes.""" import socket from...

Titan FTP Service - Detect

Titan FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Titan FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'Titan FTP Service - Detect',...

Tornado-VxWorks FTP Service - Detect

Tornado-VxWorks FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Tornado-VxWorks FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name':...

Versa SD-WAN Login Panel - Detect

Versa SD-WAN login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Versa SD-WAN login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Versa SD-WAN Login Panel - Detect',...

VertiGIS - Detect

VertiGIS products was detected. !/usr/bin/env python3 -- coding: utf-8 -- """VertiGIS products was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'VertiGIS - Detect', 'description': 'VertiGIS products was...

ViewPoint System Status Detection

ViewPoint System status page is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """ViewPoint System status page is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ViewPoint System Status Detection',...

Virtua Software Panel - Detect

Virtua Software panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Virtua Software panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Virtua Software Panel - Detect', 'description':...

VMware Aria Operations Login - Detect

Detects VMware Aria Operations Panel. !/usr/bin/env python3 -- coding: utf-8 -- """Detects VMware Aria Operations Panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'VMware Aria Operations Login - Detect',...

VMware Cloud Director Login Panel - Detect

VMware Cloud Director login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """VMware Cloud Director login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'VMware Cloud Director Login...

Desktop Portal VMware Horizon DaaS Trade Platform Detection

Detects Desktop Portal VMware Horizon DaaS Trade Platform. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Desktop Portal VMware Horizon DaaS Trade Platform.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Deskt...

Vodafone Vox UI Login Panel - Detect

Vodafone Vox UI login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Vodafone Vox UI login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Vodafone Vox UI Login Panel - Detect',...

Voyager 1.3.0 - Directory Traversal Detection

Voyager 1.3.0 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Voyager 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Voyager 1.3.0 - Directory Traversal Detection',...

Visual Studio Code MCP Configuration ("mcp.json") Exposure Detection

Detected exposed VS Code MCP Model Context Protocol configuration files mcp.json which may contain sensitive information including API keys, server endpoints, authentication tokens, and tool configurations for AI assistants and language models. !/usr/bin/env python3 -- coding: utf-8 -- """Detecte...

Wordpress W3C Total Cache <= 0.9.4 - Server Side Request Forgery (SSRF) Detection

The W3 Total Cache WordPress plugin was affected by an Unauthenticated Server Side Request Forgery SSRF security vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """The W3 Total Cache WordPress plugin was affected by an Unauthenticated Server Side Request Forgery SSRF secu.""" from...

WAGO PLC Panel - Detect

WAGO PLC panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """WAGO PLC panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WAGO PLC Panel - Detect', 'description': 'WAGO PLC panel was...

WAGO Web based Management - Default Login Detection

Identified WAGO Web-Based Management interfaces that were accessible using default credentials admin:wago.These interfaces are used to configure and monitor WAGO programmable logic controllers PLCs and automation systems. Use of factory-default credentials exposed critical OT infrastructure to...

Wallix Access Manager Panel - Detect

Wallix Access Manager panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Wallix Access Manager panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.osint.faviconhash import shodanmmh3 class ModuleScanner, Httpclient: info =...

Wanhu OA download_old.jsp - Arbitrary File Read Detection

There is an arbitrary file download vulnerability in the Wanhu OA downloadold.jsp file. An attacker can download any file on the server through the vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """There is an arbitrary file download vulnerability in the Wanhu OA downloadold.""" from...

OA E-Office UserSelect Unauthorized Access Detection

OA E-Office UserSelect interface has an unauthorized access vulnerability, through which attackers can obtain sensitive information !/usr/bin/env python3 -- coding: utf-8 -- """OA E-Office UserSelect interface has an unauthorized access vulnerability, through which attackers can obtain .""" from...

Webigniter 28.7.23 - Cross-Site Scripting Detection

The value of the redirect request parameter is copied into the value of an HTML tag attribute which is encapsulated in double quotation marks. The payload ycsz3"alert1bn76w was submitted in the redirect parameter. This input was echoed unmodified in the application's response. By using this Java...

Weblate Public Project - Exposure Detection

Weblate instance is publicly accessible. Public exposure of Weblate may lead to unauthorized access to translation projects, potential data leaks, credential exposure, or manipulation of open source localization data. Attackers can view available projects and access sensitive information if prope...

Webpack Configuration File - Detect

Webpack configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Webpack configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Webpack Configuration File - Detect',...

WebSwing REST API Version - Detection

WebSwing REST API version via the /rest/version endpoint. !/usr/bin/env python3 -- coding: utf-8 -- """WebSwing REST API version via the /rest/version endpoint.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WebSwin...

WebTrees Exposed Installation Detection

WebTrees is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """WebTrees is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Webuzo Installer Detection

Webuzo is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Webuzo is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Westermo Industrial Router - Login Panel Detection

Westermo industrial router web interface panel has been detected. !/usr/bin/env python3 -- coding: utf-8 -- """Westermo industrial router web interface panel has been detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

WireGuard Easy (wg-easy) - Login Panel Detection

wg-easy is the easiest way to run WireGuard VPN with a web-based admin UI. It exposes a management interface for creating and managing WireGuard peers. !/usr/bin/env python3 -- coding: utf-8 -- """wg-easy is the easiest way to run WireGuard VPN with a web-based admin UI.""" from kittysploit impor...

Whatsup Gold Login Panel - Detect

Whatsup Gold login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Whatsup Gold login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Whatsup Gold Login Panel - Detect',...

Wiren Board WebUI Panel - Detect

Wiren Board WebUI panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Wiren Board WebUI panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Wiren Board WebUI Panel - Detect', 'description...

Seeyon WooYun - Local File Inclusion Detection

Seeyon WooYun allows remote attackers to include the content of locally stored content and disclose it back to the attacker via local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Seeyon WooYun allows remote attackers to include the content of locally stored content and disclose it...

WordPress Plugin "AffiliateWP -- Allowed Products" Log Disclosure Detection

Exposed debug log in AffiliateWP Wordpress Plugin !/usr/bin/env python3 -- coding: utf-8 -- """Exposed debug log in AffiliateWP Wordpress Plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WordPress Plugin...

WordPress AMP - Full Path Disclosure Detection

The WordPress AMP - Accelerated Mobile Pages plugin was detected to be vulnerable to Full Path Disclosure, allowing unauthenticated access to the full application path. !/usr/bin/env python3 -- coding: utf-8 -- """The WordPress AMP - Accelerated Mobile Pages plugin was detected to be vulnerable t...

WordPress DB Backup Detection

WordPress DB Backup plugin exposes db file along with directory listing. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress DB Backup plugin exposes db file along with directory listing.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Wordpress DB Repair Exposed Detection

Discover enabled Wordpress repair page. !/usr/bin/env python3 -- coding: utf-8 -- """Discover enabled Wordpress repair page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Wordpress DB Repair Exposed Detection',...

WordPress Plugin Imsanity - Full Path Disclosure Detection

WordPress Imsanity plugin is vulnerable to full path disclosure via direct access to plugin files. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Imsanity plugin is vulnerable to full path disclosure via direct access to plugin files.""" from kittysploit import from...

WordPress Meta Box - Full Path Disclosure Detection

The Meta Box – WordPress Custom Fields Framework plugin for WordPress was detected to be vulnerable to Full Path Disclosure, allowing unauthenticated attackers to obtain the full application path. !/usr/bin/env python3 -- coding: utf-8 -- """The Meta Box – WordPress Custom Fields Framework plugin...

WordPress ThemeMarkers DB Migration File Detection

Detects WordPress ThemeMarkers DB Migration File. !/usr/bin/env python3 -- coding: utf-8 -- """Detects WordPress ThemeMarkers DB Migration File.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WordPress...

Wordpress User Enumeration Detection

This template detects user enumeration in wordpress. !/usr/bin/env python3 -- coding: utf-8 -- """This template detects user enumeration in wordpress.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Wordpre...

WordPress Configuration wp-env - Exposure Detection

Detected the WordPress wp-env.json configuration file publicly accessible, potentially revealing the PHP version, installed plugins, themes, and development environment details. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the WordPress wp-env.""" from kittysploit import from...

WoWonder Installation Page - Exposure Detection

Detects exposed WoWonder installation page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed WoWonder installation page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WoWonder Installation Page - Exposu...

Wowza Streaming Engine Manager Panel - Detect

Wowza Streaming Engine Manager panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Wowza Streaming Engine Manager panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Wowza Streaming Engin...

Wpmudev Dashboard Pub Key Detection

Wpmudev Wordpress Plugin public key leaked. !/usr/bin/env python3 -- coding: utf-8 -- """Wpmudev Wordpress Plugin public key leaked.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Wpmudev Dashboard Pub Key Detection...

WordPress a3 Lazy Load - Full Path Disclosure Detection

WordPress Plugin a3 Lazy Load plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin a3 Lazy Load plugin files are publicly...