Silverlight cross-domain policy Detection

Detects Silverlight cross-domain policy. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Silverlight cross-domain policy.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Silverlight cross-domain policy Detection...

Cloudflare Transform via URL - Image Injection Detection

Transform via URL feature in Cloudflare allow attackers to show arbitrary images to the visitor of a crafted URL on the website. This can be used to perform various attacks such as phishing, defacement, etc. !/usr/bin/env python3 -- coding: utf-8 -- """Transform via URL feature in Cloudflare allo...

Cloud Config File Exposure Detection

Cloud Config file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Cloud Config file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cloud Config File Exposure Detection', 'description': 'Cloud...

GCP/AWS Metadata Disclosure Detection

GCP/AWS Metadata is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """GCP/AWS Metadata is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GCP/AWS Metadata Disclosure Detection', 'description': 'GCP/AWS...

Google Cloud Run Default Page Detection

Detects Google Cloud Run Default Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Google Cloud Run Default Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Google Cloud Run Default Page Detection',...

CMS Made Simple Installation Page - Exposure Detection

Detects exposed CMS Made Simple Installation page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed CMS Made Simple Installation page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'CMS Made Simple...

Cockpit Project Login Panel - Detect

Cockpit Project products was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Cockpit Project products was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cockpit Project Login Panel - Detect',...

CockroachDB Information Disclosure Detection

CockroachDB exposed the Statements Admin UI page and the HTTP endpoint /status/statements in ways that let non-admin users and in some builds, unauthenticated callers see SQL text executed across the cluster. !/usr/bin/env python3 -- coding: utf-8 -- """CockroachDB exposed the Statements Admin UI...

Codeception YAML Configuration File - Detect

Codeception YAML configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Codeception YAML configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Codeception YAML...

Codis Dashboard Exposure Detection

Codis Dashboard is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Codis Dashboard is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Codis Dashboard Exposure Detection', 'description': 'Codis Dashboar...

Adobe ColdFusion - Cross-Site Scripting Detection

Adobe ColdFusion debug page contains a cross-site scripting vulnerability when the application is running on a remote host. An attacker can execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...

Command API Explorer Panel - Detect

Command API Explorer panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Command API Explorer panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Command API Explorer Panel - Detect',...

Compal CH7465LG Login Panel - Detect

Compal CH7465LG login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Compal CH7465LG login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Compal CH7465LG Login Panel - Detect',...

Concourse CI Login Panel - Detect

Concourse CI login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Concourse CI login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Concourse CI Login Panel - Detect',...

Atlassian Confluence End-of-Life - Detect

Detected Atlassian Confluence instances versions that have reached End-of-Life EOL and no longer receive security updates. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Atlassian Confluence instances versions that have reached End-of-Life EOL and no longer receive sec.""" import re from...

Confluence Installation Page - Exposure Detection

Confluence is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Confluence is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

ContaCam Snapshot Images - Detect

ContaCam snapshot images were detected. !/usr/bin/env python3 -- coding: utf-8 -- """ContaCam snapshot images were detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ContaCam Snapshot Images - Detect',...

Drupal 7 Elfinder - Unauthenticated Connector Exposure Detection

Identifies Drupal sites with the elfinder library installed, which could be vulnerable to unrestricted file upload through the connector.php file.When this component is detected, the site may be vulnerable to remote code execution attacks via PHP file uploads.This template only detects the presen...

Kong Manager OSS/Admin - Exposure Detection

Exposed Kong Manager OSS/Admin interface accessible without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Exposed Kong Manager OSS/Admin interface accessible without authentication.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Apache JMeter Dashboard Login Panel - Detect

Detects the Apache JMeter Dashboard web UI distinct title and assets. !/usr/bin/env python3 -- coding: utf-8 -- """Apache JMeter Dashboard login panel detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "Apache...

CPPPO Ethernet/IP CIP Honeypot Default Configuration - Detect

Detected devices responding with the default configuration signature of the CPPPO Python-based Ethernet/IP CIP parser honeypot.This indicates systems likely running the default Conpot honeypot configuration for ICS using the Common Industrial Protocol CIP over Ethernet/IP. !/usr/bin/env python3 -...

SSDP / UPnP Detection

Sends a unicast SSDP M-SEARCH to detect UPnP devices on UDP 1900. !/usr/bin/env python3 -- coding: utf-8 -- """Detect SSDP / UPnP responders.""" from kittysploit import from lib.protocols.ics.icsscannerclient import Icsscannerclient from lib.scanner.ssdp.detectors import probessdp class...

vBulletin Detect

vBulletin is a proprietary forum and community publishing software written in PHP. !/usr/bin/env python3 -- coding: utf-8 -- """vBulletin is a proprietary forum and community publishing software written in PHP.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Google A2A Agent Card - Enumeration Detection

Detected exposed Google Agent-to-Agent protocol agent cards. The agent-card.json file advertises an AI agent's capabilities, supported skills, authentication requirements, and endpoint URLs. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed Google Agent-to-Agent protocol agent cards."...

aaPanel Detection

Detects aaPanel Linux management panel login interface. !/usr/bin/env python3 -- coding: utf-8 -- """Detect aaPanel Linux management panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "aaPanel Detection",...

Acrolinx Dashboard Detection

An Acrolinx Analytics dashboard was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An Acrolinx Analytics dashboard was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Acrolinx Dashboard Detection',...

Actifio Resource Center - Panel Detection

Actifio Resource Center was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Actifio Resource Center was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Actifio Resource Center - Panel Detection',...

Apache ActiveMQ Exposure Detection

An Apache ActiveMQ implementation was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """An Apache ActiveMQ implementation was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache ActiveMQ Exposur...

ACTi-Video Monitoring - Local File Inclusion Detection

ACTI video surveillance has loopholes in reading any files !/usr/bin/env python3 -- coding: utf-8 -- """ACTI video surveillance has loopholes in reading any files.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Acunetix 360 Installer Detection

Acunetix 360 is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Acunetix 360 is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclien...

Adapt Authoring Tool - Panel Detection

Login panel for adapt was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Login panel for adapt was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Adapt Authoring Tool - Panel Detection',...

Jolokia write to RCE valve Detection

RCE in Jolokia 1.7.1 using AccesLogValve !/usr/bin/env python3 -- coding: utf-8 -- """RCE in Jolokia 1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Jolokia write to RCE valve Detection', 'description': 'RCE in...

Expect-CT Header - Misconfigured Detection

Detected misconfigured Expect-CT headers: max-age is 0 ineffective and enforce directive is missing !/usr/bin/env python3 -- coding: utf-8 -- """Detected misconfigured Expect-CT headers: max-age is 0 ineffective and enforce directive is missing.""" from kittysploit import from...

Jinhe OA C6 download.jsp - Arbitary File Read Detection

There is an arbitrary file read vulnerability in Jinhe OA C6 download.jsp file, through which an attacker can obtain sensitive information in the server !/usr/bin/env python3 -- coding: utf-8 -- """There is an arbitrary file read vulnerability in Jinhe OA C6 download.""" from kittysploit import...

PHP 8.1.0-dev - Backdoor Remote Code Execution Detection

PHP 8.1.0-dev contains a backdoor dubbed 'zerodiumvardump' which can allow the execution of arbitrary PHP code. !/usr/bin/env python3 -- coding: utf-8 -- """PHP 8.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PHP...

Marimo Panel - Detect

Marimo is an open-source reactive Python notebook and app framework that replaces Jupyter with git-friendly, reproducible notebooks. !/usr/bin/env python3 -- coding: utf-8 -- """Marimo is an open-source reactive Python notebook and app framework that replaces Jupyter with git-friendly, r.""" from...

Jolokia Logback JNDI - Remote Code Execution Detection

Jolokia Logback is vulnerable to RCE. !/usr/bin/env python3 -- coding: utf-8 -- """Jolokia Logback is vulnerable to RCE.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Jolokia Logback JNDI - Remote Code Execution...

Outline Panel - Detect

Detects self-hosted Outline wiki instances getoutline.com. Uses product-specific markers; ignores generic SPA pages containing the word outline in CSS/JS bundles. !/usr/bin/env python3 -- coding: utf-8 -- """Outline getoutline.com team wiki panel detection.""" from kittysploit import from...

Lotus Domino Version Extractor Detection

Detects Lotus Domino Version Extractor. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Lotus Domino Version Extractor.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Lotus Domino Version Extractor...

Roundcube webmail Detection

Detects Roundcube webmail. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Roundcube webmail.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Roundcube webmail Detection', 'description': 'Detects...

Accueil WAMPSERVER Configuration Page - Detect

Accueil WAMPSERVER configuration page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Accueil WAMPSERVER configuration page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Accueil WAMPSERVER...

Ace Admin Dashboard - Detect

Ace Admin dashboard page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ace Admin dashboard page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ace Admin Dashboard - Detect', 'description':...

Ackee Panel Detection

Detects Ackee self-hosted analytics login panels. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Ackee analytics panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "Ackee Panel Detection", "description":...

Let's Encrypt - Cross-Site Scripting Detection

Let's Encrypt contains a cross-site scripting vulnerability when using the the ACME protocol to issue SSL certificates. !/usr/bin/env python3 -- coding: utf-8 -- """Let's Encrypt contains a cross-site scripting vulnerability when using the the ACME protocol to issue SSL cert.""" from kittysploit...

Action Controller Exception - Page Detection

Detects Action Controller Exception - Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Action Controller Exception - Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Action Controller Exception - Page...

ActiveAdmin Admin Dasboard Exposure Detection

An ActiveAdmin Admin dashboard was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """An ActiveAdmin Admin dashboard was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ActiveAdmin Admin Dasboard...

ACTi Video Monitoring Panel - Detection

Detects ACTi Video Monitoring Panel - Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects ACTi Video Monitoring Panel - Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ACTi Video Monitoring Pan...

Acunetix Login Panel Detection

An Acunetix login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An Acunetix login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Acunetix Login Panel Detection', 'description':...

Xceedium Xsuite - read_sessionlog LFI Detection

Detects Xceedium Xsuite LFI via /opm/readsessionlog.php?logFile=....//etc/passwd. !/usr/bin/env python3 -- coding: utf-8 -- """Xceedium Xsuite readsessionlog.php LFI CVE-2015-4666.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

NUUO Camera <=20250203 - OS Command Injection Detection

NUUO Camera up to 20250203 contains a command injection caused by manipulation of the 'log' argument in /handleconfig.php, letting remote attackers execute arbitrary commands, exploit requires remote access. !/usr/bin/env python3 -- coding: utf-8 -- """NUUO Camera up to 20250203 contains a comman...