SHOOWBIZ - Cross Site Scripting Detection

Cross-Site Scripting, is a type of security vulnerability commonly found in web applications. It occurs when an attacker injects malicious scripts typically written in JavaScript into web pages viewed by other users. !/usr/bin/env python3 -- coding: utf-8 -- """Cross-Site Scripting, is a type of...

Shopizer Detection

Detects Shopizer Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Shopizer Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Shopizer Detection', 'description': 'Detects Shopizer Detection.',...

Shoppable Service Auth Token Detection

Detects Shoppable Service Auth Token. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Shoppable Service Auth Token.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Shoppable Service Auth Token Detection',...

SHOUTcast Server Panel - Detect

SHOUTcast Server panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SHOUTcast Server panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SHOUTcast Server Panel - Detect', 'description':...

ShowDoc Panel Detection

ShowDoc panel was detected. ShowDoc was a tool for documenting APIs and interfaces. !/usr/bin/env python3 -- coding: utf-8 -- """ShowDoc panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ShowDoc Pan...

Siemens Logo! 8 Web - Panel Detection

Siemens Logo! 8 Web Login Panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Siemens Logo! 8 Web Login Panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Siemens Logo! 8 Web - Panel...

SillyTavern Panel - Detect

SillyTavern was detected. SillyTavern is a character-based AI roleplay and chat frontend that connects to local or remote LLM backends. Exposed instances may allow unauthenticated access to AI models and conversation history. !/usr/bin/env python3 -- coding: utf-8 -- """SillyTavern was detected."...

Signet Explorer Dashboard - Detect

Signet Explorer Dashboard was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Signet Explorer Dashboard was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Signet Explorer Dashboard - Detect',...

Silverback MDM - Detection

Detects Silverback MDM - Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Silverback MDM - Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.osint.faviconhash import shodanmmh3 class ModuleScanner, Httpclient: info = 'name':...

Sitecore Admin Login Panel - Detect

Sitecore admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Sitecore admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sitecore Admin Login Panel - Detect',...

Sitecore 9.3 - Webroot File Read Detection

SiteCore 9.3 is vulnerable to LFI. !/usr/bin/env python3 -- coding: utf-8 -- """SiteCore 9.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sitecore 9.3 - Webroot File Read Detection', 'description': 'SiteCore 9.3 is...

Sitefinity Login Detection

This template identifies the Sitefinity login page. !/usr/bin/env python3 -- coding: utf-8 -- """This template identifies the Sitefinity login page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sitefinity Login...

Skeepers Login Panel - Detect

Skeepers login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Skeepers login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Skeepers Login Panel - Detect', 'description':...

SkyCaiji - Exposed Installation Detection

SkyCaiji was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """SkyCaiji was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SkyCaiji - Exposed Installation Detection', 'description': 'SkyCaiji was...

Slack Webhook URL Detection

Detects Slack Webhook URL. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Slack Webhook URL.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Slack Webhook URL Detection', 'description': 'Detects Slack...

Senayan Library Management System v9.5.2 (Bulian) - Cross-Site Scripting Detection

SLiMS 9.5.2 Bulian vulnerable to Cross-Site Scripting in index.php. When injected, website will execute the payload repeatedly !/usr/bin/env python3 -- coding: utf-8 -- """SLiMS 9.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: inf...

Slims CMS - Detect

Detects Senayan Library Management System SLiMS CMS !/usr/bin/env python3 -- coding: utf-8 -- """Detects Senayan Library Management System SLiMS CMS.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Slims CMS - Detect...

Slocum Fleet Mission Control Login Panel - Detect

Slocum Fleet Mission Control login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Slocum Fleet Mission Control login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Slocum Fleet...

Webbdesign SL-Studio - Local File Inclusion Detection

Webbdesign SL-Studio is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Webbdesign SL-Studio is vulnerable to local file inclusion.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

SmarterStats Setup Exposure Detection

SmarterStats Setup is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """SmarterStats Setup is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SmarterStats Setup Exposure Detection', 'description':...

SmokePing Latency Page for Network Latency Grapher Detection

SmokePing Latency Page is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """SmokePing Latency Page is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SmokePing Latency Page for Network Latency Grapher...

SMTP Credentials Exposure - Detection

Detects exposed SMTP credentials username and password in a webpage's HTML or JavaScript source code. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed SMTP credentials username and password in a webpage's HTML or JavaScript source code.""" from kittysploit import from...

Snipe-IT Panel - Detect

Snipe-IT panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Snipe-IT panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Snipe-IT Panel - Detect', 'description': 'Snipe-IT panel was...

Snoop Servlet - Information Disclosure Detection

The Snoop Servlet returns information about the HTTP request itself and sometimes. It could help an attacker to prepare more advanced attacks. !/usr/bin/env python3 -- coding: utf-8 -- """The Snoop Servlet returns information about the HTTP request itself and sometimes.""" from kittysploit import...

Softneta MedDream PACS Server Premium 6.7.1.1 - Local File Inclusion Detection

Softneta MedDream PACS Server Premium 6.7.1.1 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Softneta MedDream PACS Server Premium 6.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name'...

SolarView Compact 6.00 - Cross-Site Scripting Detection

SolarView Compact 6.00 contains a cross-site scripting vulnerability via fname at /SolarImage.php. !/usr/bin/env python3 -- coding: utf-8 -- """SolarView Compact 6.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Solr - Admin Page Access Detection

Solr's admin page was able to be accessed with no authentication requirements in place. !/usr/bin/env python3 -- coding: utf-8 -- """Solr's admin page was able to be accessed with no authentication requirements in place.""" from kittysploit import from lib.protocols.http.httpclient import...

Sonarr Dashboard - Unauthenticated Detection

Exposure of Sonarr dashboard which can lead to sensitive information disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Exposure of Sonarr dashboard which can lead to sensitive information disclosure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

SonicWall Management Admin Login Panel - Detect

SonicWall Management admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SonicWall Management admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SonicWall...

Sonicwall SSLVPN - Remote Code Execution (ShellShock) Detection

Sonicwall SSLVPN contains a 'ShellShock' vulnerability which allows remote unauthenticated attackers to execute arbitrary commands. !/usr/bin/env python3 -- coding: utf-8 -- """Sonicwall SSLVPN contains a 'ShellShock' vulnerability which allows remote unauthenticated attackers to execut.""" impor...

SonicWall Network Security Login - Detect

SonicWall Network Security Login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SonicWall Network Security Login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SonicWall Network...

Sophos Web Appliance Detection

Detects Sophos Web Appliance. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Sophos Web Appliance.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sophos Web Appliance Detection', 'description': 'Detects Sophos...

SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x (PHPTail) Unauthenticated File Disclosure Detection

The application suffers from an unauthenticated file disclosure vulnerability. Using the 'file' GET parameter attackers can disclose arbitrary files on the affected device and disclose sensitive and system information. !/usr/bin/env python3 -- coding: utf-8 -- """The application suffers from an...

Unauthenticated Spark WebUI Detection

Spark WebUI is exposed to external users without any authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Spark WebUI is exposed to external users without any authentication.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

SpiderControl SCADA Web Server - Sensitive Information Exposure Detection

SpiderControl SCADA Web Server is vulnerable to sensitive information exposure. Numerous, market-leading OEM manufacturers - from a wide variety of industries - rely on SpiderControl. !/usr/bin/env python3 -- coding: utf-8 -- """SpiderControl SCADA Web Server is vulnerable to sensitive informatio...

Splunk Enterprise Login Panel - Detect

Splunk Enterprise login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Splunk Enterprise login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Splunk Enterprise Login Panel -...

Spring Boot Actuators (Jolokia) XXE Detection

A vulnerability in Spring Boot Actuators's 'jolokia' endpoint allows remote attackers to perform an XML External Entities XXE attack and include content stored on a remote server as if it was its own. This has the potential to allow the execution of arbitrary code and/or disclosure of sensitive...

Spring Boot AuditEvents Actuator Panel - Detect

Spring Boot Auditevents Actuator panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Spring Boot Auditevents Actuator panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Spring Boot...

Springboot Actuator Caches Detection

The caches endpoint provides access to the application's caches. !/usr/bin/env python3 -- coding: utf-8 -- """The caches endpoint provides access to the application's caches.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Detect Springboot Dump Actuator

Performs a thread dump !/usr/bin/env python3 -- coding: utf-8 -- """Performs a thread dump.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect Springboot Dump Actuator', 'description': 'Performs a thread dump',...

Detects Springboot HTTP Exchanges Actuator

The exposed httpexchanges endpoint can leak recent HTTP request/response data, including URIs, headers, and status codes. !/usr/bin/env python3 -- coding: utf-8 -- """The exposed httpexchanges endpoint can leak recent HTTP request/response data, including URIs, headers, and st.""" from kittysploi...

Detect Springboot httptrace

View recent HTTP requests and responses !/usr/bin/env python3 -- coding: utf-8 -- """View recent HTTP requests and responses.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect Springboot httptrace', 'description...

Detects Springboot Jolokia Actuator

Springboot Jolokia Actuator is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Springboot Jolokia Actuator is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detects Springboot Jolokia Actuator',...

Springboot Liquidbase API Detection

This liquibase endpoint provides information about database changes !/usr/bin/env python3 -- coding: utf-8 -- """This liquibase endpoint provides information about database changes.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: in...

Springboot Actuator Metrics - Exposure Detection

Spring Boot Metrics Actuator endpoint was detected, which may expose system metrics information. This template detects both older Spring Boot 1.x format and newer 2.x/3.x format. !/usr/bin/env python3 -- coding: utf-8 -- """Spring Boot Metrics Actuator endpoint was detected, which may expose syst...

Spring Boot Actuator SBOM - Exposure Detection

Spring Boot Actuator SBOM endpoint was detected and is exposed without authentication. The endpoint returns a Software Bill of Materials typically CycloneDX or SPDX JSON listing every dependency and version shipped with the application, which lets an attacker enumerate the exact library inventory...

Springboot Actuator startup Detection

The startup endpoint provides information about the application’s startup sequence. !/usr/bin/env python3 -- coding: utf-8 -- """The startup endpoint provides information about the application’s startup sequence.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...

Spring Boot `X-Application-Context` Header Exposure Detection

Detected the presence of the X-Application-Context header in HTTP responses, which can expose sensitive application context information. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the presence of the X-Application-Context header in HTTP responses, which can expose sensitive applic."""...

Spring Eureka Exposure Detection

Spring Eureka is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Spring Eureka is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Spring Eureka Exposure Detection', 'description': 'Spring Eureka is...

SQLite History - Exposure Detection

Detects exposed .sqlitehistory files. These files contain SQLite command history, including executed queries, table names, and potentially sensitive data that was queried or inserted. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed .""" import re from kittysploit import from...