Traefik Dashboard Panel - Detect

Traefik Dashboard panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Traefik Dashboard panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Traefik Dashboard Panel - Detect', 'description...

WordPress WPFront Scroll Top - Full Path Disclosure Detection

WordPress Plugin WPFront Scroll Top plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin WPFront Scroll Top plugin files are...

Sambar FTP Service - Detect

The File Transfer Protocol FTP is a standard network protocol that transfers computer files between a client and server on a computer network. !/usr/bin/env python3 -- coding: utf-8 -- """The File Transfer Protocol FTP is a standard network protocol that transfers computer files between a...

WordPress Manage Calameo Publications 1.1.0 - Cross-Site Scripting Detection

WordPress Manage Calameo Publications 1.1.0 is vulnerable to reflected cross-site scripting via thickboxcontent.php and the attachmentid parameter. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Manage Calameo Publications 1.""" from kittysploit import from lib.protocols.http.httpclient...

SAS Login Panel - Detect

SAS login panel has been detected. !/usr/bin/env python3 -- coding: utf-8 -- """SAS login panel has been detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SAS Login Panel - Detect', 'description': 'SAS login...

LANIER MP 2555 FTP Service - Detect

LANIER MP 2555 FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """LANIER MP 2555 FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'LANIER MP...

Traccar Server Settings - Disclosure Detection

Traccar exposes server settings at the /api/server endpoint without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Traccar exposes server settings at the /api/server endpoint without authentication.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...

TRUfusion Enterprise <= 7.10.4.0 - Admin Contact Portal Detection

TRUfusion Enterprise versions 7.10.4.0 and earlier contained a vulnerability that allowed unauthenticated access to the Internal Admin Contact Page, resulting in the disclosure of PII including partner and contact names. !/usr/bin/env python3 -- coding: utf-8 -- """TRUfusion Enterprise versions...

pfSense Login Panel - Detect

pfSense login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """pfSense login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'pfSense Login Panel - Detect', 'description': 'pfSense...

Inertia.js - Detect

Detected Inertia.js passively using a single plain GET request with no special headers. It matched four server-emitted Inertia-specific signals on the initial document: three proximity-bound body patterns covering the embedded page object formats and one Vary: X-Inertia response header signal set...

Label Studio < 1.16.0 - Cross-Site Scripting Detection

Label Studio prior to version 1.16.0 contains a cross-site scripting caused by rendering unsanitized user-provided HTML in the /projects/upload-example endpoint, letting attackers execute arbitrary JavaScript via crafted labelconfig in a GET request, exploit requires victims to visit malicious UR...

Dash Panel Detect

Detects Dash Panel Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Dash Panel Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dash Panel Detect', 'description': 'Detects Dash Panel Detect.',...

Zimbra Collaboration - Local File Inclusion Detection

Zimbra Collaboration ZCS 10.0 and 10.1 contain a local file inclusion caused by improper handling of user-supplied parameters in the RestFilter servlet, letting unauthenticated remote attackers include arbitrary files from WebRoot, exploit requires crafted requests to /h/rest endpoint...

Docassemble - Local File Inclusion Detection

Docassemble is an expert system for guided interviews and document assembly. The vulnerability allows attackers to gain unauthorized access to information on the system through URL manipulation. It affects versions 1.4.53 to 1.4.96. The vulnerability has been patched in version 1.4.97 of the mast...

EmpireCMS Detect

Detects EmpireCMS Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects EmpireCMS Detect.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'EmpireCMS Detect', 'description': 'Detects EmpireCMS Detect.'...

Caucho Resin LFR Detection

There is an input verification vulnerability in the implementation of a certain CGI program in Resin. A remote attacker may use this vulnerability to read any files in the home directory of the Web, including JSP source code or class files. !/usr/bin/env python3 -- coding: utf-8 -- """There is an...

XWiki < 14.10.14 - Cross-Site Scripting Detection

XWiki is vulnerable to reflected cross-site scripting RXSS via the rev parameter that is used in the content of the content menu without escaping. If an attacker can convince a user to visit a link with a crafted parameter, this allows the attacker to execute arbitrary actions in the name of the...

Ruby Gem::ConfigFile Credential - Exposure Detection

Ruby Gem credentials file is exposed, potentially leaking RubyGems API keys. The /.gem/credentials file stores authentication tokens for publishing gems to RubyGems.org or private gem servers. !/usr/bin/env python3 -- coding: utf-8 -- """Ruby Gem credentials file is exposed, potentially leaking...

Apache NiFi - Unauthenticated API Exposure Detection

Detects unauthenticated access to /nifi-api/process-groups/root RCE attack surface when API auth is disabled. Does not confirm command execution. !/usr/bin/env python3 -- coding: utf-8 -- """Apache NiFi is designed for data streaming.""" from kittysploit import from lib.protocols.http.httpclient...

Apache Spark Environment - Exposure Detection

Detected Apache Spark Web UI exposed environment variables and application information without authentication, potentially revealing sensitive configuration details. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Apache Spark Web UI exposed environment variables and application information...

nostromo 1.9.6 - Remote Code Execution Detection

nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via directory traversal in the function httpverify. !/usr/bin/env python3 -- coding: utf-8 -- """nostromo nhttpd through 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient...

SAP Solution Manager 7.2 - Remote Command Execution Detection

SAP Solution Manager SolMan running version 7.2 has a remote command execution vulnerability within the SAP EEM servlet tcsmdagentapplicationeem. The vulnerability occurs due to missing authentication checks when submitting SOAP requests to the /EemAdminService/EemAdmin page to get information...

Samsung WLAN AP WEA453e - Local File Inclusion Detection

Samsung WLAN AP WEA453e is susceptible to local file inclusion vulnerabilities. !/usr/bin/env python3 -- coding: utf-8 -- """Samsung WLAN AP WEA453e is susceptible to local file inclusion vulnerabilities.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Apache Storm Unauth Detection

Apache Storm instance is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Storm instance is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.scanner.http.probeguard import lookslikeapachestormsummary, validatejsonprobe class...

Jolokia Detection

Detects Jolokia Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Jolokia Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.scanner.http.probeguard import lookslikejolokiaversion, validatejsonprobe class ModuleScanner, Httpclient: in...

Kube API Nodes Detection

Scans for kube nodes !/usr/bin/env python3 -- coding: utf-8 -- """Scans for kube nodes.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.scanner.http.probeguard import lookslikekubernetesnodelist, validatejsonprobe class ModuleScanner, Httpclient: info =...

Prometheus Config API Endpoint Discovery Detection

A Prometheus config API endpoint was discovered. The config endpoint returns the loaded Prometheus configuration file along with the addresses of targets and alerting/discovery services alongside the credentials required to access them. Usually, Prometheus replaces the passwords in the credential...

Spring Boot Health Actuator Panel - Detect

Spring Boot Health Actuator panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Spring Boot Health Actuator panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.scanner.http.probeguard import validatespringjsonprobe from...

NUUO Camera <=20250203 - OS Command Injection Detection

NUUO Camera up to 20250203 contains a command injection caused by manipulation of the 'log' argument in /handleconfig.php, letting remote attackers execute arbitrary commands, exploit requires remote access. !/usr/bin/env python3 -- coding: utf-8 -- """NUUO Camera up to 20250203 contains a comman...

Jolokia file write to RCE jfr Detection

File read and file write to RCE by deploying a vhost with MBeanFactory/createStandardHost and DiagnosticCommand/jfrStart !/usr/bin/env python3 -- coding: utf-8 -- """File read and file write to RCE by deploying a vhost with MBeanFactory/createStandardHost and DiagnosticComman.""" from kittysploit...

Apache JMeter Dashboard Login Panel - Detect

Detects the Apache JMeter Dashboard web UI distinct title and assets. !/usr/bin/env python3 -- coding: utf-8 -- """Apache JMeter Dashboard login panel detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "Apache...

Makefile - Exposure Detection

Detected Makefile configuration file was identified, which potentially exposed build process details, author information, and directory structure !/usr/bin/env python3 -- coding: utf-8 -- """Detected Makefile configuration file was identified, which potentially exposed build process details, auth...

Dahua 'GetClassValue' - Remote Code Execution Detection

Remote Code Execution Vulnerability in Dahua Intelligent IoT Integrated Management Platform via GetClassValue.jsp. !/usr/bin/env python3 -- coding: utf-8 -- """Remote Code Execution Vulnerability in Dahua Intelligent IoT Integrated Management Platform via GetClassValue.""" import re from...

Kube API Services Detection

Scans for kube services !/usr/bin/env python3 -- coding: utf-8 -- """Scans for kube services.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.scanner.http.probeguard import lookslikekubernetesservicelist, validatejsonprobe class ModuleScanner, Httpclient:...

Netdata Panel - Detect

Netdata panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Netdata panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.scanner.http.probeguard import lookslikenetdatainfo, validatejsonprobe class ModuleScanner, Httpclient:...

Odoo - Panel Detect

Detects Odoo - Panel Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Odoo - Panel Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Odoo - Panel Detect', 'description': 'Detects Odoo - Panel...

Weak Content Security Policy - Detect

Detected misconfigured CSP directives containing unsafe and overly permissive keywords that weakened resource loading restrictions. This configuration allowed high-risk script behaviors, resulting in reduced protection against XSS attacks. !/usr/bin/env python3 -- coding: utf-8 -- """Detected...

TP-LINK - Local File Inclusion Detection

TP-LINK is susceptible to local file inclusion in these products: Archer C5 1.2 with firmware before 150317, Archer C7 2.0 with firmware before 150304, and C8 1.0 with firmware before 150316, Archer C9 1.0, TL-WDR3500 1.0, TL-WDR3600 1.0, and TL-WDR4300 1.0 with firmware before 150302, TL-WR740N...

Fortinet FortiOS - Credentials Disclosure Detection

Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to download system files via special crafted HTTP resource requests due to improper limitation of a...

VMware vSphere Client (HTML5) - Remote Code Execution Detection

The vSphere Client HTML5 contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is enabled by default in vCenter Server. A malicious actor with network access to port 443 may exploit this issue to execute commands with...

Dahua IPC/VTH/VTO - Authentication Bypass Detection

The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets. !/usr/bin/env python3 -- coding: utf-8 -- """The identity authentication bypass vulnerability found i...

ForgeRock OpenAM <7.0 - Remote Code Execution Detection

ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pages. The exploitation does not require authentication, and remote code execution can be triggered by sending a single crafted /ccversion/ request to the server. The vulnerabilit...

Citrix NetScaler ADC and NetScaler Gateway - Remote Code Execution Detection

critical unauthenticated remote code execution RCE vulnerability affecting Citrix ADC NetScaler ADC and Citrix Gateway appliances configured as a Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy or AAA virtual server. Exploitation can lead to arbitrary code execution. !/usr/bin/env python3 ...

Honeywell PM43 Printers - Command Injection Detection

Improper Input Validation vulnerability in Honeywell PM43 on 32 bit, ARM Printer web page modules allows Command Injection.This issue affects PM43 versions prior to P10.19.050004. Update to the latest available firmware version of the respective printers to version MR19.5 e.g. P10.19.050006...

Citrix Netscaler ADC & Gateway - Out-Of-Bounds Memory Read Detection

The vulnerability would enable an attacker to remotely obtain sensitive information from a NetScaler appliance configured as a Gateway or AAA virtual server via a very commonly connected Web interface, and without requiring authentication. This bug is nearly identical to the Citrix Bleed...

OpenAM <= 16.0.5 - Pre-Auth RCE via jato.clientSession Deserialization Detection

Open Access Management OpenAM is an access management solution. Prior to 16.0.6, OpenIdentityPlatform OpenAM is vulnerable to pre-authentication Remote Code Execution RCE via unsafe Java deserialization of the jato.clientSession HTTP parameter. This bypasses the WhitelistObjectInputStream...

Ivanti Connect Secure CVE-2024-21887 Detection

Detects the CVE-2023-46805 auth-bypass path that enables CVE-2024-21887 command injection by reading restricted JSON APIs without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Ivanti Connect Secure CVE-2024-21887 surface via CVE-2023-46805 auth bypass.""" from kittysploit import fr...

Gogs <= 0.13.3 - Remote Code Execution Detection

Gogs self-hosted Git service versions 0.13.3 and earlier contain a critical symlink bypass vulnerability that circumvents the fix for CVE-2024-55947. Authenticated users can exploit improper symbolic link handling in the PutContents API to overwrite files outside the repository by committing a...

Quest KACE System Management Appliance 8.0.318 - Remote Code Execution Detection

Detects exposed Quest KACE SMA /common/downloadagentinstaller.php CVE-2018-11138. Requires product-specific response content, not generic page text. !/usr/bin/env python3 -- coding: utf-8 -- """Quest KACE SMA CVE-2018-11138 — downloadagentinstaller.php exposure.""" from kittysploit import from...

Outline Panel - Detect

Detects self-hosted Outline wiki instances getoutline.com. Uses product-specific markers; ignores generic SPA pages containing the word outline in CSS/JS bundles. !/usr/bin/env python3 -- coding: utf-8 -- """Outline getoutline.com team wiki panel detection.""" from kittysploit import from...