WordPress Contact Form 7 Captcha <0.1.2 - Cross-Site Scripting Detection

WordPress Contact Form 7 Captcha plugin before 0.1.2 contains a reflected cross-site scripting vulnerability. It does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Contact Form 7 Captcha plugin before...

Crestron Device - Credentials Disclosure Detection

An issue was discovered on Crestron HD-MD4X2-4K-E 1.0.0.2159 devices. When the administrative web interface of the HDMI switcher is accessed unauthenticated, user credentials are disclosed that are valid to authenticate to the web interface. Specifically, aj.html sends a JSON document with uname...

BigAnt Server v5.6.06 - Local File Inclusion Detection

BigAnt Server v5.6.06 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """BigAnt Server v5.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'BigAnt Server v5.6.06 - Local File Inclusion...

Apache NiFi - Information Disclosure Detection

Apache NiFi 1.10.0 through 2.0.0 are missing fine-grained authorization checking for Parameter Contexts, referenced Controller Services, and referenced Parameter Providers, when creating new Process Groups. Creating a new Process Group can include binding to a Parameter Context, but in cases wher...

RTSP - Detect

RTSP was detected. !/usr/bin/env python3 -- coding: utf-8 -- """RTSP was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'RTSP - Detect', 'description': 'RTSP was detected.',...

mDNS / DNS-SD Detection

Queries DNS-SD over unicast or multicast mDNS UDP 5353. In typed mode, probes IoT service types and suggests KittySploit follow-up modules. !/usr/bin/env python3 -- coding: utf-8 -- """Detect mDNS / DNS-SD responders and map IoT service types to modules.""" from kittysploit import from...

SSDP / UPnP Detection

Sends a unicast SSDP M-SEARCH to detect UPnP devices on UDP 1900. !/usr/bin/env python3 -- coding: utf-8 -- """Detect SSDP / UPnP responders.""" from kittysploit import from lib.protocols.ics.icsscannerclient import Icsscannerclient from lib.scanner.ssdp.detectors import probessdp class...

vBulletin Detect

vBulletin is a proprietary forum and community publishing software written in PHP. !/usr/bin/env python3 -- coding: utf-8 -- """vBulletin is a proprietary forum and community publishing software written in PHP.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Google A2A Agent Card - Enumeration Detection

Detected exposed Google Agent-to-Agent protocol agent cards. The agent-card.json file advertises an AI agent's capabilities, supported skills, authentication requirements, and endpoint URLs. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed Google Agent-to-Agent protocol agent cards."...

Accueil WAMPSERVER Configuration Page - Detect

Accueil WAMPSERVER configuration page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Accueil WAMPSERVER configuration page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Accueil WAMPSERVER...

Ace Admin Dashboard - Detect

Ace Admin dashboard page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ace Admin dashboard page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ace Admin Dashboard - Detect', 'description':...

Let's Encrypt - Cross-Site Scripting Detection

Let's Encrypt contains a cross-site scripting vulnerability when using the the ACME protocol to issue SSL certificates. !/usr/bin/env python3 -- coding: utf-8 -- """Let's Encrypt contains a cross-site scripting vulnerability when using the the ACME protocol to issue SSL cert.""" from kittysploit...

Actifio Resource Center - Panel Detection

Actifio Resource Center was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Actifio Resource Center was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Actifio Resource Center - Panel Detection',...

Action Controller Exception - Page Detection

Detects Action Controller Exception - Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Action Controller Exception - Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Action Controller Exception - Page...

Apache ActiveMQ Exposure Detection

An Apache ActiveMQ implementation was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """An Apache ActiveMQ implementation was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache ActiveMQ Exposur...

ActiveAdmin Admin Dasboard Exposure Detection

An ActiveAdmin Admin dashboard was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """An ActiveAdmin Admin dashboard was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ActiveAdmin Admin Dasboard...

ACTi-Video Monitoring - Local File Inclusion Detection

ACTI video surveillance has loopholes in reading any files !/usr/bin/env python3 -- coding: utf-8 -- """ACTI video surveillance has loopholes in reading any files.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Acunetix Login Panel Detection

An Acunetix login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An Acunetix login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Acunetix Login Panel Detection', 'description':...

Adapt Authoring Tool - Panel Detection

Login panel for adapt was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Login panel for adapt was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Adapt Authoring Tool - Panel Detection',...

Add DOM EventListener - Detection

Identifies the use of JavaScript addEventListener calls in the DOM. !/usr/bin/env python3 -- coding: utf-8 -- """Identifies the use of JavaScript addEventListener calls in the DOM.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

AdGuard Home Panel Detection

Detects AdGuard Home management panels. !/usr/bin/env python3 -- coding: utf-8 -- """Detect AdGuard Home panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "AdGuard Home Panel Detection", "description": "Detects...

AdminBro Dashboard - Unauthenticated Access Detection

Detected AdminBro/AdminJS admin panel was exposed without authentication, allowing unauthenticated users to access the admin dashboard and potentially view, modify, or delete sensitive data. This misconfiguration occurred when developers used buildRouter instead of buildAuthenticatedRouter...

Adobe ColdFusion Component Browser Login Panel Detection

An Adobe ColdFusion Component Browser login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An Adobe ColdFusion Component Browser login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Adobe Connect Username Exposure Detection

Adobe Connect Username is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Adobe Connect Username is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Adobe Connect Username Exposure Detection',...

WordPress Advanced Access Manager < 5.9.9 - Local File Inclusion Detection

WordPress Advanced Access Manager versions before 5.9.9 are vulnerable to local file inclusion and allows attackers to download the wp-config.php file and get access to the database, which is publicly reachable on many servers. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Advanced Acces...

AEM BG-Servlets Detection

Detects AEM BG-Servlets. !/usr/bin/env python3 -- coding: utf-8 -- """Detects AEM BG-Servlets.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AEM BG-Servlets Detection', 'description': 'Detects AEM BG-Servlets.',...

Invalidate / Flush Cached Pages on AEM Detection

Cached Pages on AEM can be Flushed. !/usr/bin/env python3 -- coding: utf-8 -- """Cached Pages on AEM can be Flushed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Invalidate / Flush Cached Pages on AEM Detection',...

AEM Finder Detection

Detects AEM Finder. !/usr/bin/env python3 -- coding: utf-8 -- """Detects AEM Finder.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AEM Finder Detection', 'description': 'Detects AEM Finder.', 'author': 'KittySploit...

Adobe AEM CRX Browser Exposure Detection

Detects Adobe AEM CRX Browser Exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Adobe AEM CRX Browser Exposure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Adobe AEM CRX Browser Exposure Detection',...

AEM Groovy Console Discovery Detection

An Adobe Experience Manager Groovy console was discovered. This can possibly lead to remote code execution. !/usr/bin/env python3 -- coding: utf-8 -- """An Adobe Experience Manager Groovy console was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Adobe AEM JCR Compare Exposure Detection

Detected an exposed Adobe AEM JCR compare functionality that was accessible without proper authorization. This exposure may have allowed attackers to infer repository structure or sensitive content through comparison operations. !/usr/bin/env python3 -- coding: utf-8 -- """Detected an exposed Ado...

AEM Login Status Detection

LoginStatusServlet is exposed, it allows to bruteforce credentials. !/usr/bin/env python3 -- coding: utf-8 -- """LoginStatusServlet is exposed, it allows to bruteforce credentials.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: inf...

Adobe AEM Offloading Browser Detection

Adobe AEM Offloading Browser is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Adobe AEM Offloading Browser is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Adobe AEM Offloading Browser Detection',...

AEM Secrets - Sensitive Information Disclosure Detection

Possible Juicy Files can be discovered at this endpoint. Search / Grep for secrets like hashed passwords SHA , internal email disclosure etc. !/usr/bin/env python3 -- coding: utf-8 -- """Possible Juicy Files can be discovered at this endpoint.""" from kittysploit import from...

Adobe AEM Sling User Info Servlet Exposure Detection

Detects Adobe AEM Sling User Info Servlet Exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Adobe AEM Sling User Info Servlet Exposure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Adobe AEM Sling Use...

Agent-Zero Application - Detect

Detected Agent-Zero AI agent framework installation. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Agent-Zero AI agent framework installation.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Agent-Zero...

WordPress Age Gate <2.13.5 - Open Redirect Detection

WordPress Age Gate plugin before 2.13.5 contains an open redirect vulnerability via the wphttpreferer parameter after certain actions and after invalid or missing nonces. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute...

Apache Airflow Configuration Page - Detect

Apache Airflow configuration page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Airflow configuration page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Airflow Configuratio...

AirOS Panel - Detect

AirOS panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """AirOS panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AirOS Panel - Detect', 'description': 'AirOS panel was detected.',...

Akeeba Backup Installer - Exposure Detection

Akeeba Backup is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Akeeba Backup is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import...

AKHQ Panel Detection

Detects AKHQ Kafka HQ login UI exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detect AKHQ Kafka UI panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "AKHQ Panel Detection", "description": "Detects AKHQ...

alfacgiapi Detection

Searches for sensitive directories present in the alfacgiapi plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for sensitive directories present in the alfacgiapi plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

Alibaba Anyproxy fetchBody File - Path Traversal Detection

Alibaba Anyproxy is vulnerable to Path Traversal. !/usr/bin/env python3 -- coding: utf-8 -- """Alibaba Anyproxy is vulnerable to Path Traversal.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Alibaba...

Alibaba Mongoshake Unauth Detection

Detects Alibaba Mongoshake Unauth. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Alibaba Mongoshake Unauth.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Alibaba Mongoshake Unauth Detection', 'description':...

Amazon EC2 Server Detect

Detects Amazon EC2 Server Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Amazon EC2 Server Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Amazon EC2 Server Detect', 'description': 'Detects Amaz...

Ambassador API Gateway Diagnostics - Exposure Detection

Detected Ambassador API Gateway diagnostics portal, revealing service mappings, API endpoints, routing configurations, and internal cluster information. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Ambassador API Gateway diagnostics portal, revealing service mappings, API endpoints,...

Ametys Admin Login Panel Detection

An Ametys admin login panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """An Ametys admin login panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ametys Admin Login Panel Detection'...

AMPPS by Softaculous Panel - Directory Listing - Detect

AMPPS by Softaculous panel directory listing was detected. !/usr/bin/env python3 -- coding: utf-8 -- """AMPPS by Softaculous panel directory listing was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AMPPS...

AMR Printer Management Dashboard - Exposure Detection

Unauthorized access to the AMR Printer Management dashboard was possible, potentially exposing sensitive printer configuration and management interfaces without proper authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Unauthorized access to the AMR Printer Management dashboard was...

Anaqua Login - Panel Detection

Checks for the presence of Anaqua login page !/usr/bin/env python3 -- coding: utf-8 -- """Checks for the presence of Anaqua login page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Anaqua Login - Panel Detection',...