Akeeba Backup Installer - Exposure Detection

Akeeba Backup is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Akeeba Backup is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import...

AKHQ Panel Detection

Detects AKHQ Kafka HQ login UI exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detect AKHQ Kafka UI panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "AKHQ Panel Detection", "description": "Detects AKHQ...

alfacgiapi Detection

Searches for sensitive directories present in the alfacgiapi plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for sensitive directories present in the alfacgiapi plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

Alibaba Anyproxy fetchBody File - Path Traversal Detection

Alibaba Anyproxy is vulnerable to Path Traversal. !/usr/bin/env python3 -- coding: utf-8 -- """Alibaba Anyproxy is vulnerable to Path Traversal.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Alibaba...

Alibaba Mongoshake Unauth Detection

Detects Alibaba Mongoshake Unauth. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Alibaba Mongoshake Unauth.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Alibaba Mongoshake Unauth Detection', 'description':...

Amazon EC2 Server Detect

Detects Amazon EC2 Server Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Amazon EC2 Server Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Amazon EC2 Server Detect', 'description': 'Detects Amaz...

Ambassador API Gateway Diagnostics - Exposure Detection

Detected Ambassador API Gateway diagnostics portal, revealing service mappings, API endpoints, routing configurations, and internal cluster information. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Ambassador API Gateway diagnostics portal, revealing service mappings, API endpoints,...

Ametys Admin Login Panel Detection

An Ametys admin login panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """An Ametys admin login panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ametys Admin Login Panel Detection'...

AMPPS by Softaculous Panel - Directory Listing - Detect

AMPPS by Softaculous panel directory listing was detected. !/usr/bin/env python3 -- coding: utf-8 -- """AMPPS by Softaculous panel directory listing was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AMPPS...

AMR Printer Management Dashboard - Exposure Detection

Unauthorized access to the AMR Printer Management dashboard was possible, potentially exposing sensitive printer configuration and management interfaces without proper authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Unauthorized access to the AMR Printer Management dashboard was...

Anaqua Login - Panel Detection

Checks for the presence of Anaqua login page !/usr/bin/env python3 -- coding: utf-8 -- """Checks for the presence of Anaqua login page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Anaqua Login - Panel Detection',...

Angular JSON File Exposure Detection

Detects Angular JSON File Exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Angular JSON File Exposure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Angular JSON File Exposure Detection', 'description...

Ansible Tower - Detect

Ansible Tower was detected. Ansible Tower is a commercial offering that helps teams manage complex multi-tier deployments by adding control, knowledge, and delegation to Ansible-powered environments. !/usr/bin/env python3 -- coding: utf-8 -- """Ansible Tower was detected.""" from kittysploit impo...

AnythingLLM Panel Detection

Detects AnythingLLM personal LLM web interface. !/usr/bin/env python3 -- coding: utf-8 -- """Detect AnythingLLM panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "AnythingLLM Panel Detection", "description":...

Apache Spark Application UI - Exposed Detection

Detects exposed PySparkShell Application UI by Apache Spark on port 4040. The UI should not be exposed to the internet as it may leak sensitive job and cluster information. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed PySparkShell Application UI by Apache Spark on port 4040.""" fr...

Apache Answer - Detection

Detects Apache Answer version through API endpoit !/usr/bin/env python3 -- coding: utf-8 -- """Detects Apache Answer version through API endpoit.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Answer -...

Apache Casbin MCP Gateway - Detection

Detects an Apache Casbin MCP Gateway server, a lightweight gateway service that instantly transforms existing MCP Servers and APIs into MCP servers with zero code changes. !/usr/bin/env python3 -- coding: utf-8 -- """Detects an Apache Casbin MCP Gateway server, a lightweight gateway service that...

Apache CloudStack - Detect

CloudStack is open-source Infrastructure-as-a-Service cloud computing software for creating, managing, and deploying infrastructure cloud services. It uses existing hypervisor platforms for virtualization, such as KVM, VMware vSphere, including ESXi and vCenter, XenServer/XCP and XCP-ng...

Apache Configuration File - Detect

Apache configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Apache configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Configuration File - Detect',...

Apache Druid Unauth Detection

Apache Druid is exposed to external users. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Druid is exposed to external users.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Druid Unauth Detection',...

Apache Guacamole Login Page and version detection

Detects Apache Guacamole Login Page and version detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Apache Guacamole Login Page and version detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apach...

Apache Hbase Unauth Detection

Apache Hbase is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Hbase is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Hbase Unauth Detection', 'description': 'Apache Hbase is exposed.'...

Apache InLong - Detect

Detects a Apache InLong server, a one-stop, full-scenario integration framework for massive data. !/usr/bin/env python3 -- coding: utf-8 -- """Detects a Apache InLong server, a one-stop, full-scenario integration framework for massive data.""" from kittysploit import from...

Apache Kyuubi - Detect

Detects a Apache Kyuubi server, a distributed and multi-tenant gateway to provide serverless SQL on data warehouses and lakehouses. !/usr/bin/env python3 -- coding: utf-8 -- """Detects a Apache Kyuubi server, a distributed and multi-tenant gateway to provide serverless SQL on data wareh.""" from...

Apache `mod_proxy_cluster` Cluster Manager Interface - Exposure Detection

The Apache modproxycluster management interface provides administrative control and visibility into the load balancer’s nodes and contexts. !/usr/bin/env python3 -- coding: utf-8 -- """The Apache modproxycluster management interface provides administrative control and visibility into the load."""...

Apache Pinot - Exposure Detection

Detects if path Appconfigs of Apache Pinot web application is exposed, getting internal information about the configuration made. !/usr/bin/env python3 -- coding: utf-8 -- """Detects if path Appconfigs of Apache Pinot web application is exposed, getting internal information about the .""" from...

Server Status Disclosure Detection

Apache Server Status page is exposed, which may contain information about pages visited by the users, their IPs or sensitive information such as session tokens. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Server Status page is exposed, which may contain information about pages visited by...

Apache StreamPipes - Detect

Checks for the presence of Apache StreamPipes by looking in the body or matching the favicon hash. !/usr/bin/env python3 -- coding: utf-8 -- """Checks for the presence of Apache StreamPipes by looking in the body or matching the favicon hash.""" from kittysploit import from...

Apache Syncope - Detect

Detected an Apache Syncope server, an enterprise digital identity management platform built with Java EE and licensed under Apache 2.0. !/usr/bin/env python3 -- coding: utf-8 -- """Detected an Apache Syncope server, an enterprise digital identity management platform built with Java EE and l."""...

Tomcat Exposed - Detect

An Apache Tomcat instance was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An Apache Tomcat instance was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tomcat Exposed - Detect', 'description': 'A...

Apache Airflow OS Command Injection Detection

Apache Airflow prior to version 2.2.4 is vulnerable to OS command injection attacks because some example DAGs do not properly sanitize user-provided parameters, making them susceptible to OS Command Injection from the web UI. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Airflow prior to...

SmarterTools SmarterTrack - Cross-Site Scripting Detection

Cross-site Scripting XSS vulnerability in SmarterTools SmarterTrack This issue affects: SmarterTools SmarterTrack 100.0.8019.14010. !/usr/bin/env python3 -- coding: utf-8 -- """Cross-site Scripting XSS vulnerability in SmarterTools SmarterTrack This issue affects: SmarterTools Smarter.""" from...

Zimbra Collaboration Suite < 8.8.15 - Improper Encoding Detection

An issue was discovered in the Calendar feature in Zimbra Collaboration Suite 8.8.x before 8.8.15 patch 30 update 1, as exploited in the wild starting in December 2021. An attacker could place HTML containing executable JavaScript inside element attributes. This markup becomes unescaped, causing...

Icinga Web 2 - Arbitrary File Disclosure Detection

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Unauthenticated users can leak the contents of files of the local system accessible to the web-server user, including icingaweb2 configuration files with database credentials. !/usr/bin/env python3 --...

Flyte Console <0.52.0 - Server-Side Request Forgery Detection

FlyteConsole is the web user interface for the Flyte platform. FlyteConsole prior to version 0.52.0 is vulnerable to server-side request forgery when FlyteConsole is open to the general internet. An attacker can exploit any user of a vulnerable instance to access the internal metadata server or...

Contao <4.13.3 - Cross-Site Scripting Detection

Contao prior to 4.13.3 contains a cross-site scripting vulnerability. It is possible to inject arbitrary JavaScript code into the canonical tag. !/usr/bin/env python3 -- coding: utf-8 -- """Contao prior to 4.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

DVDFab 12 Player/PlayerFab - Local File Inclusion Detection

DVDFab 12 Player/PlayerFab is susceptible to local file inclusion which allows a remote attacker to download any file on the Windows file system for which the user account running DVDFab 12 Player recently renamed PlayerFab has read-access. !/usr/bin/env python3 -- coding: utf-8 -- """DVDFab 12...

ThinkPHP 5.0.24 - Information Disclosure Detection

ThinkPHP 5.0.24 is susceptible to information disclosure. This version was configured without the PATHINFO parameter. This can allow an attacker to access all system environment parameters from index.php, thereby possibly obtaining sensitive information, modifying data, and/or executing...

Barco Control Room Management Suite <=2.9 Build 0275 - Local File Inclusion Detection

Barco Control Room Management through Suite 2.9 Build 0275 is vulnerable to local file inclusion that could allow attackers to access sensitive information and components. Requests must begin with the "GET /...." substring. !/usr/bin/env python3 -- coding: utf-8 -- """Barco Control Room Managemen...

HotelDruid Hotel Management Software 3.0.3 - Cross-Site Scripting Detection

HotelDruid Hotel Management Software 3.0.3 contains a cross-site scripting vulnerability via the prezzoperiodo4 parameter in creaprezzi.php. !/usr/bin/env python3 -- coding: utf-8 -- """HotelDruid Hotel Management Software 3.""" from kittysploit import from lib.protocols.http.httpclient import...

Open Automation Software OAS Platform V16.00.0121 - Missing Authentication Detection

An improper authentication vulnerability exists in the REST API functionality of Open Automation Software OAS Platform V16.00.0121. A specially-crafted series of HTTP requests can lead to unauthenticated use of the REST API. An attacker can send a series of HTTP requests to trigger this...

elFinder <=2.1.60 - Local File Inclusion Detection

elFinder through 2.1.60 is affected by local file inclusion via connector.minimal.php. This allows unauthenticated remote attackers to read, write, and browse files outside the configured document root. This is due to improper handling of absolute file paths. !/usr/bin/env python3 -- coding: utf-...

Zimbra Collaboration (ZCS) - Cross Site Scripting Detection

A reflected cross-site scripting XSS vulnerability in the /public/launchNewWindow.jsp component of Zimbra Collaboration aka ZCS 9.0 allows unauthenticated attackers to execute arbitrary web script or HTML via request parameters. !/usr/bin/env python3 -- coding: utf-8 -- """A reflected cross-site...

Reprise License Manager 14.2 - Information Disclosure Detection

Reprise License Manager 14.2 is susceptible to information disclosure via a GET request to /goforms/rlminfo. No authentication is required. The information disclosed is associated with software versions, process IDs, network configuration, hostnames, system architecture and file/directory...

Caddy 2.4.6 - Open Redirect Detection

Caddy 2.4.6 contains an open redirect vulnerability. An attacker can redirect a user to a malicious site via a crafted URL and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """Caddy 2.""" import re from...

SolarView Compact 6.00 - Local File Inclusion Detection

SolarView Compact 6.00 is vulnerable to local file inclusion which could allow attackers to access sensitive files. !/usr/bin/env python3 -- coding: utf-8 -- """SolarView Compact 6.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

SolarView Compact 6.00 - 'pow' Cross-Site Scripting Detection

SolarView Compact version 6.00 contains a cross-site scripting vulnerability in the 'pow' parameter to SolarSlideSub.php. !/usr/bin/env python3 -- coding: utf-8 -- """SolarView Compact version 6.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

WordPress Elementor Website Builder <= 3.5.5 - DOM Cross-Site Scripting Detection

WordPress Elementor Website Builder plugin 3.5.5 and prior contains a reflected cross-site scripting vulnerability via the document object model. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Elementor Website Builder plugin 3.""" from kittysploit import from lib.protocols.http.httpclien...

iSpy 7.2.2.0 - Authentication Bypass Detection

iSpy 7.2.2.0 contains an authentication bypass vulnerability. An attacker can craft a URL and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """iSpy 7.""" from kittysploit import from...

Wavlink WN-535G3 - Cross-Site Scripting Detection

Wavlink WN-535G3 contains a POST cross-site scripting vulnerability via the hostname parameter at /cgi-bin/login.cgi. !/usr/bin/env python3 -- coding: utf-8 -- """Wavlink WN-535G3 contains a POST cross-site scripting vulnerability via the hostname parameter at /cgi-bin/log.""" from kittysploit...