Adobe ColdFusion Component Browser Login Panel Detection

An Adobe ColdFusion Component Browser login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An Adobe ColdFusion Component Browser login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Adobe Connect Central Version Detection

Detects Adobe Connect Central Version. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Adobe Connect Central Version.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Adobe Connect Central Version Detection',...

AdonisJS - Detect

AdonisJS framework was detected. !/usr/bin/env python3 -- coding: utf-8 -- """AdonisJS framework was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AdonisJS - Detect', 'description': 'AdonisJS framework wa...

Adobe Experience Manager Login Panel Detection

An Adobe Experience Manager login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An Adobe Experience Manager login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Adobe Experienc...

WordPress Advanced Access Manager < 5.9.9 - Local File Inclusion Detection

WordPress Advanced Access Manager versions before 5.9.9 are vulnerable to local file inclusion and allows attackers to download the wp-config.php file and get access to the database, which is publicly reachable on many servers. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Advanced Acces...

Advantech WebAccess/SCADA - Panel Detection

Detected Advantech WebAccess/SCADA login panel, a web-browser-based HMI/SCADA software used in critical manufacturing, energy, and water systems. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Advantech WebAccess/SCADA login panel, a web-browser-based HMI/SCADA software used in critical...

AEM BG-Servlets Detection

Detects AEM BG-Servlets. !/usr/bin/env python3 -- coding: utf-8 -- """Detects AEM BG-Servlets.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AEM BG-Servlets Detection', 'description': 'Detects AEM BG-Servlets.',...

AEM BulkEditor Detection

Detects AEM BulkEditor. !/usr/bin/env python3 -- coding: utf-8 -- """Detects AEM BulkEditor.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AEM BulkEditor Detection', 'description': 'Detects AEM BulkEditor.',...

Adobe AEM CRX Search Exposed Detection

Detects Adobe AEM CRX Search Exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Adobe AEM CRX Search Exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Adobe AEM CRX Search Exposed Detection',...

Adobe AEM Debugging Client Libraries Detection

Detects Adobe AEM Debugging Client Libraries. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Adobe AEM Debugging Client Libraries.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Adobe AEM Debugging Client...

Favicon based AEM Detection

Detects Favicon based AEM Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Favicon based AEM Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.osint.faviconhash import shodanmmh3 class ModuleScanner, Httpclient: info = 'name':...

Adobe AEM Disk Usage Information Disclosure Detection

Adobe AEM Disk Usage Information is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Adobe AEM Disk Usage Information is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Adobe AEM Disk Usage Information...

Adobe AEM External Link Checker Exposure Detection

Detects Adobe AEM External Link Checker Exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Adobe AEM External Link Checker Exposure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Adobe AEM External Link...

Query JCR role via QueryBuilder Servlet Detection

Detects Query JCR role via QueryBuilder Servlet. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Query JCR role via QueryBuilder Servlet.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Query JCR role via...

AEM MergeMetadataServlet Detection

Detects AEM MergeMetadataServlet. !/usr/bin/env python3 -- coding: utf-8 -- """Detects AEM MergeMetadataServlet.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AEM MergeMetadataServlet Detection', 'description':...

Adobe AEM Offloading Browser Detection

Adobe AEM Offloading Browser is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Adobe AEM Offloading Browser is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Adobe AEM Offloading Browser Detection',...

Adobe AEM Installed OSGI Bundles Detection

Adobe AEM Installed OSGI Bundles leaked. !/usr/bin/env python3 -- coding: utf-8 -- """Adobe AEM Installed OSGI Bundles leaked.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Adobe AEM Installed OSGI Bundles...

AEM Secrets - Sensitive Information Disclosure Detection

Possible Juicy Files can be discovered at this endpoint. Search / Grep for secrets like hashed passwords SHA , internal email disclosure etc. !/usr/bin/env python3 -- coding: utf-8 -- """Possible Juicy Files can be discovered at this endpoint.""" from kittysploit import from...

Adobe Experience Manager - Cross-Site Scripting Detection

Adobe Experience Manager contains a cross-site scripting vulnerability via setPreferences. !/usr/bin/env python3 -- coding: utf-8 -- """Adobe Experience Manager contains a cross-site scripting vulnerability via setPreferences.""" from kittysploit import from lib.protocols.http.httpclient import...

Adobe AEM Sling User Info Servlet Exposure Detection

Detects Adobe AEM Sling User Info Servlet Exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Adobe AEM Sling User Info Servlet Exposure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Adobe AEM Sling Use...

AEM UserInfo Servlet Credentials Exposure Detection

Adobe Experience Manager UserInfoServlet is exposed which allows an attacker to bruteforce credentials. You can get valid usernames from jcr:createdBy, jcr:lastModifiedBy, cq:LastModifiedBy attributes of any JCR node. !/usr/bin/env python3 -- coding: utf-8 -- """Adobe Experience Manager...

Aerohive NetConfig UI Detection

An Aerohive NetConfig user interface was detected. The NetConfig UI provides a fundamental set of configurations for configuring basic network and HiveManager connectivity settings, and uploading new IQ Engine images to Extreme Networks APs. !/usr/bin/env python3 -- coding: utf-8 -- """An Aerohiv...

airCube Dashboard Login Panel - Detect

airCube Dashboard login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """airCube Dashboard login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'airCube Dashboard Login Panel -...

AirOS Panel - Detect

AirOS panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """AirOS panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AirOS Panel - Detect', 'description': 'AirOS panel was detected.',...

AKHQ Panel Detection

Detects AKHQ Kafka HQ login UI exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detect AKHQ Kafka UI panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "AKHQ Panel Detection", "description": "Detects AKHQ...

alfacgiapi Detection

Searches for sensitive directories present in the alfacgiapi plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for sensitive directories present in the alfacgiapi plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

Alibaba Cloud OSS Bucket - Public Listing Enabled Detection

Alibaba Cloud Object Storage Service OSS bucket is publicly accessible and allows anonymous listing of objects. This misconfiguration can expose sensitive data, lead to data breaches, and result in unexpected charges on the Alibaba Cloud bill. !/usr/bin/env python3 -- coding: utf-8 -- """Alibaba...

Alibaba Mongoshake Unauth Detection

Detects Alibaba Mongoshake Unauth. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Alibaba Mongoshake Unauth.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Alibaba Mongoshake Unauth Detection', 'description':...

AlienVault USM Login Panel Detection

An AlienVault USM login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An AlienVault USM login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AlienVault USM Login Panel...

Amazon EC2 Server Detect

Detects Amazon EC2 Server Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Amazon EC2 Server Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Amazon EC2 Server Detect', 'description': 'Detects Amaz...

Ametys Admin Login Panel Detection

An Ametys admin login panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """An Ametys admin login panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ametys Admin Login Panel Detection'...

Ampache Debug Page Detection

Detects Ampache Debug Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Ampache Debug Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ampache Debug Page Detection', 'description': 'Detects Ampache Debu...

Ampache Login Panel - Detect

Ampache login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ampache login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ampache Login Panel - Detect', 'description': 'Ampache...

AMPPS by Softaculous Panel - Directory Listing - Detect

AMPPS by Softaculous panel directory listing was detected. !/usr/bin/env python3 -- coding: utf-8 -- """AMPPS by Softaculous panel directory listing was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AMPPS...

Application Management Panel - Detect

Application Management Panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Application Management Panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Application Management Panel - Detect...

AMR Printer Management Dashboard - Exposure Detection

Unauthorized access to the AMR Printer Management dashboard was possible, potentially exposing sensitive printer configuration and management interfaces without proper authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Unauthorized access to the AMR Printer Management dashboard was...

Analytify <4.2.1 - Cross-Site Scripting Detection

WordPress Analytify 4.2.1 does not escape the current URL before outputting it back in a 404 page when the 404 tracking feature is enabled, leading to reflected cross-site scripting. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Analytify 4.""" from kittysploit import from...

Andover Continuum BMS - Login Panel Detection

Andover Continuum Building Management System panel has been detected. !/usr/bin/env python3 -- coding: utf-8 -- """Andover Continuum Building Management System panel has been detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

Microsoft SCCM - Anonymous Distribution Point Access Detection

Microsoft System Center Configuration Manager SCCM can be configured to allow anonymous access to its distribution points.This can lead to sensitive data exposure and information gathering by unauthorized users.This misconfiguration is exploitable only via HTTP. !/usr/bin/env python3 -- coding:...

Ansible Tower - Detect

Ansible Tower was detected. Ansible Tower is a commercial offering that helps teams manage complex multi-tier deployments by adding control, knowledge, and delegation to Ansible-powered environments. !/usr/bin/env python3 -- coding: utf-8 -- """Ansible Tower was detected.""" from kittysploit impo...

Apache Spark Application UI - Exposed Detection

Detects exposed PySparkShell Application UI by Apache Spark on port 4040. The UI should not be exposed to the internet as it may leak sensitive job and cluster information. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed PySparkShell Application UI by Apache Spark on port 4040.""" fr...

Apache Allura - Detection

Detects a Apache Allura server, a open source implementation of a software "forge". !/usr/bin/env python3 -- coding: utf-8 -- """Detects a Apache Allura server, a open source implementation of a software "forge".""" from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...

Apache Cocoon detect

Detects Apache Cocoon detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Apache Cocoon detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Cocoon detect', 'description': 'Detects Apache Cocoon...

Apache CouchDB - Unauthenticated Access Detection

Apache CouchDB is exposed to external users. !/usr/bin/env python3 -- coding: utf-8 -- """Apache CouchDB is exposed to external users.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache CouchDB - Unauthenticated...

Apache dubbo detect

Detects Apache dubbo detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Apache dubbo detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache dubbo detect', 'description': 'Detects Apache dubbo...

Apache Filename Enumeration Detection

If the client provides an invalid Accept header, the server will respond with a 406 Not Acceptable error containing a pseudo directory listing. !/usr/bin/env python3 -- coding: utf-8 -- """If the client provides an invalid Accept header, the server will respond with a 406 Not Acceptable error...

Apache Hbase Unauth Detection

Apache Hbase is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Hbase is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Hbase Unauth Detection', 'description': 'Apache Hbase is exposed.'...

Apache Hertzbeat - Detect

Detects a Apache Hertzbeat web application is in use, that is a real-time monitoring system with agentless, performance cluster, prometheus-compatible, custom monitoring and status page building capabilities. !/usr/bin/env python3 -- coding: utf-8 -- """Detects a Apache Hertzbeat web application ...

Apache Hive Configuration - Exposure Detection

Detects if the config page of the Apache Hive is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Detects if the config page of the Apache Hive is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache...

Apache Hive - Detect

Apache Hive web application was detected, a data warehouse software facilitates reading, writing, and managing large datasets residing in distributed storage using SQL. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Hive web application was detected, a data warehouse software facilitates...