Typo3 composer.json Exposure Detection

The web application is based on Typo3 CMS. A sensitive file has been found. Access to such files must be restricted, as it may lead to disclosure of sensitive information about the web application. !/usr/bin/env python3 -- coding: utf-8 -- """The web application is based on Typo3 CMS.""" from...

Umbraco Login Panel - Detect

Umbraco login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Umbraco login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Umbraco Login Panel - Detect', 'description': 'Umbraco...

Umbraco CMS - Directory Listing Exposure Detection

Detected directory listing enabled on sensitive Umbraco CMS directories, potentially exposing configuration files, logs, backups, and other sensitive data. !/usr/bin/env python3 -- coding: utf-8 -- """Detected directory listing enabled on sensitive Umbraco CMS directories, potentially exposing...

Umbraco Mini Profiler - Exposure Detection

Detected the exposure of the MiniProfiler debugging interface in Umbraco CMS. When exposed, it can reveal sensitive information including SQL queries, execution times, stack traces, and internal application details. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the exposure of the...

Alert Manager - Unauthenticated Access Detection

Alert Manager was able to be accessed with no authentication requirements in place. !/usr/bin/env python3 -- coding: utf-8 -- """Alert Manager was able to be accessed with no authentication requirements in place.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...

FRPS Dashboard - Detect

FRPS Dashboard panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """FRPS Dashboard panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'FRPS Dashboard - Detect', 'description': 'FRPS...

Glowroot Anonymous User Detection

Anonymous user access allows to understand the host internals !/usr/bin/env python3 -- coding: utf-8 -- """Anonymous user access allows to understand the host internals.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

PRTG Traffic Grapher - Unauthenticated Access Detection

PRTG Traffic Grapher was able to be accessed with no authentication requirements in place. !/usr/bin/env python3 -- coding: utf-8 -- """PRTG Traffic Grapher was able to be accessed with no authentication requirements in place.""" from kittysploit import from lib.protocols.http.httpclient import...

H3C Server - Unauthenticated Access Detection

H3C server was able to be accessed with no authentication requirements in place. !/usr/bin/env python3 -- coding: utf-8 -- """H3C server was able to be accessed with no authentication requirements in place.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Apache Kafka - Unauthorized UI Exposure Detection

Unauthorized access to apache kakfa UI. !/usr/bin/env python3 -- coding: utf-8 -- """Unauthorized access to apache kakfa UI.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Kafka - Unauthorized UI Exposure...

Cyber Power Systems - Unauthenticated Detection

Detects unauthenticated access to Cyber Power Systems, which could lead to unauthorized control or information disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects unauthenticated access to Cyber Power Systems, which could lead to unauthorized control or information.""" from kittysplo...

Unauth Phoenix Dashboard - Detect

Phoenix Dashboard was detected and appeared to be accessible without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Phoenix Dashboard was detected and appeared to be accessible without authentication.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Unauth Supervisor Dashboard - Detect

Supervisor Dashboard was detected and appeared to be accessible without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Supervisor Dashboard was detected and appeared to be accessible without authentication.""" from kittysploit import from lib.protocols.http.httpclient import...

Ubiquiti UniFi Security Gateway - Login Panel Detection

Ubiquiti UniFi Security Gateway management panel detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ubiquiti UniFi Security Gateway management panel detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

UPS Network Management Card 4 Path Traversal Detection

UPS Network Management Card version 4 suffers from a path traversal vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """UPS Network Management Card version 4 suffers from a path traversal vulnerability.""" import re from kittysploit import from lib.protocols.http.httpclient import...

Vanguard Marketplace CMS 2.1 - Cross-Site Scripting Detection

Vanguard Marketplace CMS 2.1 contains a cross-site scripting vulnerability in the message and product title tags and in the product search box. !/usr/bin/env python3 -- coding: utf-8 -- """Vanguard Marketplace CMS 2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

vBulletin - Full Path Disclosure Detection

Detects vBulletin - Full Path Disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects vBulletin - Full Path Disclosure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'vBulletin - Full Path Disclosure...

VectorAdmin Panel - Detect

VectorAdmin panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """VectorAdmin panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'VectorAdmin Panel - Detect', 'description': 'VectorAdmi...

Veracore Login - Detect

A veracore login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """A veracore login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Veracore Login - Detect', 'description': 'A...

Vercel Config File - File Disclosure Detection

Vercel Config file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Vercel Config file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Vercel Config File - File Disclosure Detection', 'description...

SAPControl ListLogFiles - Disclosure Detection

Detected SAP systems where the SAP Start Service sapstartsrv SAPControl SOAP interface exposes the ListLogFiles web method without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Detected SAP systems where the SAP Start Service sapstartsrv SAPControl SOAP interface exposes the...

SAP Management Console - Panel Detection

Detected the SAP Management Console SAP MC web panel by requesting /sapmc/sapmc.html and checking for a gSOAP server header the page title. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the SAP Management Console SAP MC web panel by requesting /sapmc/sapmc.""" from kittysploit import from...

SAP HANA XS Engine Admin Login Panel - Detect

SAP HANA XS Engine admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SAP HANA XS Engine admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SAP HANA XS Engine...

SAP NetWeaver Portal - Detect

SAP NetWeaver Portal login has been detected. Note that NetWeaver has multiple default passwords as listed in the references. !/usr/bin/env python3 -- coding: utf-8 -- """SAP NetWeaver Portal login has been detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

SAP NetWeaver WebGUI Detection

Detection of SAP NetWeaver ABAP Webserver WebGUI !/usr/bin/env python3 -- coding: utf-8 -- """Detection of SAP NetWeaver ABAP Webserver WebGUI.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SAP NetWeaver WebGUI...

SAP Spartacus detect

Spartacus is a lean, Angular-based JavaScript storefront for SAP Commerce Cloud that communicates exclusively through the Commerce REST API. !/usr/bin/env python3 -- coding: utf-8 -- """Spartacus is a lean, Angular-based JavaScript storefront for SAP Commerce Cloud that communicates exclusively...

SAP SuccessFactors Login Panel - Detect

SAP SuccessFactors login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SAP SuccessFactors login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SAP SuccessFactors Login Panel -...

SAS Login Panel - Detect

SAS login panel has been detected. !/usr/bin/env python3 -- coding: utf-8 -- """SAS login panel has been detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SAS Login Panel - Detect', 'description': 'SAS login...

SAUTER moduWeb Vision Panel - Detect

Sauter moduWeb Vision was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Sauter moduWeb Vision was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SAUTER moduWeb Vision Panel - Detect', 'description...

ScadaBR - Login Panel Detection

ScadaBR is an open-source SCADA system based on Mango Automation, widely used in Brazil and Latin America for industrial monitoring. The "powered by Mango" tagline in the title is a unique identifier. Instances are often internet-facing without authentication controls. !/usr/bin/env python3 --...

SCEditor Detect

Detects SCEditor Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects SCEditor Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SCEditor Detect', 'description': 'Detects SCEditor Detect.', 'author':...

Schneider TAC Vista - Login Panel Detection

Schneider TAC Vista building automation panel has been detected. !/usr/bin/env python3 -- coding: utf-8 -- """Schneider TAC Vista building automation panel has been detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

ScriptCase Production Environment Login Detection

Detects ScriptCase Production Environment Login. !/usr/bin/env python3 -- coding: utf-8 -- """Detects ScriptCase Production Environment Login.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ScriptCase...

Scrutinizer Config - Detect

Scrutinizer configuration information was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Scrutinizer configuration information was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Scrutinizer Config ...

Seafile API - Detect

Seafile API was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Seafile API was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Seafile API - Detect', 'description': 'Seafile API was detected.',...

Seats Login Panel - Detect

Seats login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Seats login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Seats Login Panel - Detect', 'description': 'Seats login...

Secnet Intelligent Routing System actpt_5g.data - Information Leak Detection

Secnet Intelligent Routing System is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Secnet Intelligent Routing System is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Secnet Intelligent Routing Syst...

Ruby on Rails secrets.yml File Exposure Detection

Ruby on Rails internal secret file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Ruby on Rails internal secret file is exposed.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ruby on Rails...

SECUI WAF Panel - Detect

SECUI WAF panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SECUI WAF panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.osint.faviconhash import shodanmmh3 class ModuleScanner, Httpclient: info = 'name': 'SECUI WAF Panel -...

SecurEnvoy Login Panel - Detect

SecurEnvoy login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SecurEnvoy login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SecurEnvoy Login Panel - Detect', 'description':...

Security Onion Panel - Detect

Security Onion is a free and open source Linux distribution for intrusion detection, security monitoring, and log management. It includes CyberChef, NetworkMiner, and many other security tools. !/usr/bin/env python3 -- coding: utf-8 -- """Security Onion is a free and open source Linux distributio...

Seeyon OA A6 config.jsp - Information Disclosure Detection

The Seeyon OA A6 config.jsp page can be accessed without authorization, resulting in sensitive information leakage vulnerabilities, through which attackers can obtain sensitive information in the server !/usr/bin/env python3 -- coding: utf-8 -- """The Seeyon OA A6 config.""" from kittysploit impo...

Seized Site Detection

This website has been seized by law enforcement !/usr/bin/env python3 -- coding: utf-8 -- """This website has been seized by law enforcement.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Seized Site Detection',...

Sekolahku CMS - Detect

Sekolahku CMS is a free, open-source, and easy-to-use content management system CMS for schools and educational institutions. It is designed to help schools manage their websites, manage student information, and manage school activities. !/usr/bin/env python3 -- coding: utf-8 -- """Sekolahku CMS ...

Detect Selea Targa IP OCR-ANPR Camera

Various version of the Selea Targa IP OCR-ANPR Camera are vulnerable to an Unauthenticated RTP/RTSP/M-JPEG Stream Disclosure flaw !/usr/bin/env python3 -- coding: utf-8 -- """Various version of the Selea Targa IP OCR-ANPR Camera are vulnerable to an Unauthenticated RTP/RTSP/M-JPEG Str.""" from...

Selenium - Node Exposure Detection

Selenium was shown to have an exposed node. If a Selenium node is exposed without any form of authentication, remote command execution could be possible if chromium is configured. By default the port is 4444, still, most of the internet facing are done through reverse proxies. !/usr/bin/env pytho...

Selenium Grid Panel - Detect

Selenium Grid panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Selenium Grid panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Selenium Grid Panel - Detect', 'description': 'Selenium...

Selenoid UI Login Panel - Detect

Selenoid UI login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Selenoid UI login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Selenoid UI Login Panel - Detect', 'description...

SendGrid Env File Exposure Detection

SendGrid file is exposed containing environment variables. !/usr/bin/env python3 -- coding: utf-8 -- """SendGrid file is exposed containing environment variables.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Sendmail .forward File - Exposure Detection

Sendmail .forward file is publicly accessible. This file is used to configure email forwarding and can expose sensitive information including email addresses, forwarding rules, and potentially executable commands pipe to programs. !/usr/bin/env python3 -- coding: utf-8 -- """Sendmail .""" import ...