WordPress Symposium <=15.8.1 - Cross-Site Scripting Detection

WordPress Symposium through 15.8.1 contains a reflected cross-site scripting vulnerability via the wp-content/plugins/wp-symposium/getalbumitem.php?size parameter which allows an attacker to steal cookie-based authentication credentials and launch other attacks. !/usr/bin/env python3 -- coding:...

WordPress RobotCPA 5 - Directory Traversal Detection

The RobotCPA plugin 5 for WordPress has directory traversal via the f.php l parameter. !/usr/bin/env python3 -- coding: utf-8 -- """The RobotCPA plugin 5 for WordPress has directory traversal via the f.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...

SAP xMII 15.0 for SAP NetWeaver 7.4 - Local File Inclusion Detection

SAP xMII 15.0 for SAP NetWeaver 7.4 is susceptible to a local file inclusion vulnerability in the GetFileList function. This can allow remote attackers to read arbitrary files via a .. dot dot in the path parameter to /Catalog, aka SAP Security Note 2230978. !/usr/bin/env python3 -- coding: utf-8...

Phoenix Framework - Open Redirect Detection

Phoenix Framework versions 1.0.0 through 1.0.4, 1.1.0 through 1.1.6, 1.2.0, 1.2.2 and 1.3.0-rc.0 contain an open redirect vulnerability, which may result in phishing or social engineering attacks. !/usr/bin/env python3 -- coding: utf-8 -- """Phoenix Framework versions 1.""" import re from...

IceWarp WebMail 11.3.1.5 - Cross-Site Scripting Detection

IceWarp WebMail 11.3.1.5 is vulnerable to cross-site scripting via the language parameter. !/usr/bin/env python3 -- coding: utf-8 -- """IceWarp WebMail 11.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'IceWarp...

Palo Alto Networks PAN-OS GlobalProtect <8.1.4 - Cross-Site Scripting Detection

Palo Alto Networks PAN-OS before 8.1.4 GlobalProtect Portal Login page allows an unauthenticated attacker to inject arbitrary JavaScript or HTML, making it vulnerable to cross-site scripting. !/usr/bin/env python3 -- coding: utf-8 -- """Palo Alto Networks PAN-OS before 8.""" from kittysploit impo...

Ncomputing vSPace Pro 10 and 11 - Directory Traversal Detection

Ncomputing vSpace Pro versions 10 and 11 suffer from a directory traversal vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """Ncomputing vSpace Pro versions 10 and 11 suffer from a directory traversal vulnerability.""" from kittysploit import from lib.protocols.http.httpclient import...

Quest KACE SMA /common/run_cross_report.php 'fmt' XSS Detection

The 'fmt' parameter of the '/common/runcrossreport.php' script in the the Quest KACE System Management Appliance 8.0.318 is vulnerable to cross-site scripting. !/usr/bin/env python3 -- coding: utf-8 -- """The 'fmt' parameter of the '/common/runcrossreport.""" from kittysploit import from...

Splunk <=7.0.1 - Information Disclosure Detection

Splunk through 7.0.1 is susceptible to information disclosure by appending raw/services/server/info/server-info?outputmode=json to a query, as demonstrated by discovering a license key. !/usr/bin/env python3 -- coding: utf-8 -- """Splunk through 7.""" from kittysploit import from...

PhpMyAdmin <4.8.2 - Local File Inclusion Detection

PhpMyAdmin before version 4.8.2 is susceptible to local file inclusion that allows an attacker to include view and potentially execute files on the server. The vulnerability comes from a portion of code where pages are redirected and loaded within phpMyAdmin, and an improper test for whitelisted...

Synacor Zimbra Collaboration Suite Collaboration <8.8.11 - Cross-Site Scripting Detection

Synacor Zimbra Collaboration Suite Collaboration before 8.8.11 is vulnerable to cross-site scripting via the AJAX and html web clients. !/usr/bin/env python3 -- coding: utf-8 -- """Synacor Zimbra Collaboration Suite Collaboration before 8.""" from kittysploit import from...

Django - Open Redirect Detection

Django 1.11.x before 1.11.15 and 2.0.x before 2.0.8 contains an open redirect vulnerability. If django.middleware.common.CommonMiddleware and APPENDSLASH settings are selected, and if the project has a URL pattern that accepts any path ending in a slash, an attacker can redirect a user to a...

Cybrotech CyBroHttpServer 1.0.3 - Local File Inclusion Detection

Cybrotech CyBroHttpServer 1.0.3 is vulnerable to local file inclusion in the URI. !/usr/bin/env python3 -- coding: utf-8 -- """Cybrotech CyBroHttpServer 1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cybrotech...

LG SuperSign EZ CMS 2.5 - Local File Inclusion Detection

LG SuperSign CMS 2.5 allows reading of arbitrary files via signEzUI/playlist/edit/upload/..%2f URIs - aka local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """LG SuperSign CMS 2.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

NCBI ToolBox - Directory Traversal Detection

NCBI ToolBox 2.0.7 through 2.2.26 legacy versions contain a path traversal vulnerability via viewcgi.cgi which may result in reading of arbitrary files i.e., significant information disclosure or file deletion via the nph-viewgif.cgi query string. !/usr/bin/env python3 -- coding: utf-8 -- """NCBI...

WordPress sitepress-multilingual-cms 3.6.3 - Cross-Site Scripting Detection

WordPress plugin sitepress-multilingual-cms 3.6.3 is vulnerable to cross-site scripting in processforms via any localefilename parameter such as localefilenameen in an authenticated theme-localization.php request to wp-admin/admin.php. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress plugin...

Planon <Live Build 41 - Cross-Site Scripting Detection

Planon before Live Build 41 is vulnerable to cross-site scripting. !/usr/bin/env python3 -- coding: utf-8 -- """Planon before Live Build 41 is vulnerable to cross-site scripting.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info ...

ACME mini_httpd <1.30 - Local File Inclusion Detection

ACME minihttpd before 1.30 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """ACME minihttpd before 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ACME minihttpd 1.30 -...

Wowza Streaming Engine Manager 4.7.4.01 - Directory Traversal Detection

Wowza Streaming Engine 4.7.4.01 allows traversal of the directory structure and retrieval of a file via a remote, specifically crafted HTTP request to the REST API. !/usr/bin/env python3 -- coding: utf-8 -- """Wowza Streaming Engine 4.""" import re from kittysploit import from...

PHP Proxy 3.0.3 - Local File Inclusion Detection

PHP Proxy 3.0.3 is susceptible to local file inclusion vulnerabilities that allow unauthenticated users to read files from the server via index.php?q=file:/// a different vulnerability than CVE-2018-19246. !/usr/bin/env python3 -- coding: utf-8 -- """PHP Proxy 3.""" import re from kittysploit...

Tarantella Enterprise <3.11 - Local File Inclusion Detection

Tarantella Enterprise versions prior to 3.11 are susceptible to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Tarantella Enterprise versions prior to 3.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

Adiscon LogAnalyzer <4.1.7 - Cross-Site Scripting Detection

Adiscon LogAnalyzer before 4.1.7 contains a cross-site scripting vulnerability in the 'referer' parameter of the login.php file. !/usr/bin/env python3 -- coding: utf-8 -- """Adiscon LogAnalyzer before 4.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Oracle E-Business Suite - Blind SSRF Detection

Oracle E-Business Suite, Application Management Pack component User Monitoring subcomponent, is susceptible to blind server-side request forgery. An attacker with network access via HTTP can gain read access to a subset of data, connect to internal services like HTTP-enabled databases, or perform...

DedeCMS 5.7 - Path Disclosure Detection

DedeCMS 5.7 allows remote attackers to discover the full path via a direct request for include/downmix.inc.php or inc/incarchivesfunctions.php !/usr/bin/env python3 -- coding: utf-8 -- """DedeCMS 5.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanne...

WordPress 99 Robots WP Background Takeover Advertisements <=4.1.4 - Local File Inclusion Detection

WordPress 99 Robots WP Background Takeover Advertisements 4.1.4 is susceptible to local file inclusion via exports/download.php. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress 99 Robots WP Background Takeover Advertisements 4.""" from kittysploit import from lib.protocols.http.httpclient...

Jenkins build-metrics 1.3 - Cross-Site Scripting Detection

Jenkins build-metrics 1.3 is vulnerable to a reflected cross-site scripting vulnerability that allows attackers to inject arbitrary HTML and JavaScript into the web pages the plugin provides. !/usr/bin/env python3 -- coding: utf-8 -- """Jenkins build-metrics 1.""" from kittysploit import from...

Alfresco Share - Open Redirect Detection

Alfresco Share before 5.2.6, 6.0.N and 6.1.N contains an open redirect vulnerability via a crafted POST request. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf...

WordPress My Calendar <= 3.1.9 - Cross-Site Scripting Detection

WordPress plugin My Calendar = 3.1.9 is susceptible to reflected cross-site scripting which can be triggered via unescaped usage of URL parameters in multiple locations throughout the site. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress plugin My Calendar = 3.""" from kittysploit import...

WordPress Visualizer <3.3.1 - Cross-Site Scripting Detection

WordPress Visualizer plugin before 3.3.1 contains a stored cross-site scripting vulnerability via /wp-json/visualizer/v1/update-chart WP-JSON API endpoint. An unauthenticated attacker can execute arbitrary JavaScript when an admin or other privileged user edits the chart via the admin dashboard...

Jiangnan Online Judge 0.8.0 - Local File Inclusion Detection

Jiangnan Online Judge aka jnoj 0.8.0 is susceptible to local file inclusion via web/polygon/problem/viewfile?id=1&name=../. !/usr/bin/env python3 -- coding: utf-8 -- """Jiangnan Online Judge aka jnoj 0.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...

mDNS / DNS-SD Detection

Queries DNS-SD over unicast or multicast mDNS UDP 5353. In typed mode, probes IoT service types and suggests KittySploit follow-up modules. !/usr/bin/env python3 -- coding: utf-8 -- """Detect mDNS / DNS-SD responders and map IoT service types to modules.""" from kittysploit import from...

Publicly accessible access-log file Detection

Log file was exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Log file was exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Publicly accessible access-log file Detection', 'description': 'Log file was...

Acrolinx Dashboard Detection

An Acrolinx Analytics dashboard was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An Acrolinx Analytics dashboard was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Acrolinx Dashboard Detection',...

activecollab detect

Detects activecollab detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects activecollab detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'activecollab detect', 'description': 'Detects activecollab...

Add DOM EventListener - Detection

Identifies the use of JavaScript addEventListener calls in the DOM. !/usr/bin/env python3 -- coding: utf-8 -- """Identifies the use of JavaScript addEventListener calls in the DOM.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

AdminBro Dashboard - Unauthenticated Access Detection

Detected AdminBro/AdminJS admin panel was exposed without authentication, allowing unauthenticated users to access the admin dashboard and potentially view, modify, or delete sensitive data. This misconfiguration occurred when developers used buildRouter instead of buildAuthenticatedRouter...

AdmiralCloud - Detect

AdmiralCloud was detected. !/usr/bin/env python3 -- coding: utf-8 -- """AdmiralCloud was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AdmiralCloud - Detect', 'description': 'AdmiralCloud was detected.',...

Adobe Connect Central Version Detection

Detects Adobe Connect Central Version. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Adobe Connect Central Version.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Adobe Connect Central Version Detection',...

Invalidate / Flush Cached Pages on AEM Detection

Cached Pages on AEM can be Flushed. !/usr/bin/env python3 -- coding: utf-8 -- """Cached Pages on AEM can be Flushed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Invalidate / Flush Cached Pages on AEM Detection',...

Adobe AEM CRX Browser Exposure Detection

Detects Adobe AEM CRX Browser Exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Adobe AEM CRX Browser Exposure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Adobe AEM CRX Browser Exposure Detection',...

Adobe AEM CRX Search Exposed Detection

Detects Adobe AEM CRX Search Exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Adobe AEM CRX Search Exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Adobe AEM CRX Search Exposed Detection',...

AEM MergeMetadataServlet Detection

Detects AEM MergeMetadataServlet. !/usr/bin/env python3 -- coding: utf-8 -- """Detects AEM MergeMetadataServlet.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AEM MergeMetadataServlet Detection', 'description':...

Adobe AEM Sling User Info Servlet Exposure Detection

Detects Adobe AEM Sling User Info Servlet Exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Adobe AEM Sling User Info Servlet Exposure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Adobe AEM Sling Use...

Aim Panel - Detect

Aim, an open-source, self-hosted AI/ML experiment tracking tool used to log, query, and visualize machine learning training runs, was detected by matching its distinctive web UI page title and meta description, thereby minimizing false positives associated with the generic term "Aim". !/usr/bin/e...

Open Akamai ARL - Cross-Site Scripting Detection

Open Akamai ARL contains a cross-site scripting vulnerability. An attacker can execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. !/usr/bin/env python3 -- coding: utf-8 -- """Open Akamai ARL contains a cross-site scripting vulnerability.""" from...

Akamai Cache Detection

Sends a HEAD request with a Pragma header value of "akamai-x-cache-on" and looks for an akamai-specific response header value. !/usr/bin/env python3 -- coding: utf-8 -- """Sends a HEAD request with a Pragma header value of "akamai-x-cache-on" and looks for an akamai-specific respon.""" import re...

AKHQ Panel Detection

Detects AKHQ Kafka HQ login UI exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detect AKHQ Kafka UI panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "AKHQ Panel Detection", "description": "Detects AKHQ...

Alibaba Canal Config - Detect

Alibaba Canal configuration information was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Alibaba Canal configuration information was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Alibaba Canal...

Allied Telesis Device GUI Login Panel - Detect

Allied Telesis Device GUI login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Allied Telesis Device GUI login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Allied Telesis Devi...

Amatera Stealer C2 Panel - Detect

Amatera Stealer C2 Login Panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Amatera Stealer C2 Login Panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Amatera Stealer C2 Panel -...