AmpGuard Wifi Setup Detection

AmpGuard wifi setup panel detected. !/usr/bin/env python3 -- coding: utf-8 -- """AmpGuard wifi setup panel detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AmpGuard Wifi Setup Detection', 'description':...

Apache Druid Unauth Detection

Apache Druid is exposed to external users. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Druid is exposed to external users.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Druid Unauth Detection',...

Apache Filename Enumeration Detection

If the client provides an invalid Accept header, the server will respond with a 406 Not Acceptable error containing a pseudo directory listing. !/usr/bin/env python3 -- coding: utf-8 -- """If the client provides an invalid Accept header, the server will respond with a 406 Not Acceptable error...

Apache Mesos - Panel Detect

Apache Mesos panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Mesos panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Mesos - Panel Detect', 'description': 'Apache Meso...

Apache Sling - Detect

Detects a Apache Sling, a Java-based web framework designed for content-centric applications, using a RESTful approach to map URL requests directly to resources in a Java Content Repository JCR. !/usr/bin/env python3 -- coding: utf-8 -- """Detects a Apache Sling, a Java-based web framework design...

Apache Struts - ShowCase Application Exposure Detection

Apache Structs ShowCase Application is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Structs ShowCase Application is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Struts - ShowCase...

Apache Tika - Detection

Detects an Apache Tika server, a toolkit that detects and extracts metadata and text from over a thousand different file types such as PPT, XLS, and PDF. !/usr/bin/env python3 -- coding: utf-8 -- """Detects an Apache Tika server, a toolkit that detects and extracts metadata and text from over a...

Apache Zeppelin detect

Detects Apache Zeppelin detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Apache Zeppelin detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Zeppelin detect', 'description': 'Detects Apache...

Apollo Admin Service - Unauthenticated Access Detection

ApolloAdminservice was able to be accessed without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """ApolloAdminservice was able to be accessed without authentication.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info ...

AppDynamics (Cisco) RUM - Detect

Detects AppDynamics Cisco End User Monitoring EUM artifacts. !/usr/bin/env python3 -- coding: utf-8 -- """Detects AppDynamics Cisco End User Monitoring EUM artifacts.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Apple HttpServer Detect

Detects Apple HttpServer Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Apple HttpServer Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apple HttpServer Detect', 'description': 'Detects Apple...

Appspace Login Panel - Detect

Appspace is the workplace experience platform for your whole team that lets you manage it all – from employee communications to your physical office spaces. !/usr/bin/env python3 -- coding: utf-8 -- """Appspace is the workplace experience platform for your whole team that lets you manage it all –...

Aqua Enterprise - Panel Detect

Aqua Enterprise panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Aqua Enterprise panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Aqua Enterprise - Panel Detect', 'description': 'Aq...

ArcGIS Exposed REST API documentation Detection

ArcGIS REST API documentation was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """ArcGIS REST API documentation was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ArcGIS Exposed REST API...

Artica Web Proxy Detect

Detects Artica Web Proxy Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Artica Web Proxy Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Artica Web Proxy Detect', 'description': 'Detects Artica...

ASP.NET Launch Settings - Exposure Detection

Detected exposed launchSettings.json files in ASP.NET Core applications. This file contains environment variables and launch configurations that may leak sensitive information. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed launchSettings.""" from kittysploit import from...

ASUS AiCloud Panel - Detect

ASUS AiCloud Panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ASUS AiCloud Panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ASUS AiCloud Panel - Detect', 'description': 'ASUS AiClou...

Autobahn-Python Webserver Detect

Detects Autobahn-Python Webserver Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Autobahn-Python Webserver Detect.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Autobahn-Python Webserver...

AVTECH AVC798HA DVR - Information Exposure Detection

AVTECH AVC798HA DVR is susceptible to information exposure. CGI scripts in the /cgi-bin/nobody directory can be accessed without authentication. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 --...

Detect websites using AWS bucket storage

Detects Detect websites using AWS bucket storage. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Detect websites using AWS bucket storage.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect websites using A...

Axel WebServer - Panel Detect

Axel WebServer panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Axel WebServer panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Axel WebServer - Panel Detect',...

a-blog cms - Detect

Detects the presence of a-blog cms, a Content Management System. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of a-blog cms, a Content Management System.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Barracuda SSL VPN Log In Detection

The Barracuda SSL VPN is an integrated hardware and software solution enabling secure, clientless remote access to internal network resources from any web browser. !/usr/bin/env python3 -- coding: utf-8 -- """The Barracuda SSL VPN is an integrated hardware and software solution enabling secure,...

Baserow Login - Panel Detect

Baserow login interface was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Baserow login interface was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Baserow Login - Panel Detect', 'description...

Behat Configuration File - Detect

Behat configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Behat configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Behat Configuration File - Detect',...

Beszel Login Panel - Detect

Beszel products was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Beszel products was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Beszel Login Panel - Detect', 'description': 'Beszel products w...

Beszel Unfinished Installation Detection

Detected Beszel server monitoring hub had an unfinished installation with no admin account configured, allowing attackers to create an admin account and gain full control. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Beszel server monitoring hub had an unfinished installation with no adm...

BeyondTrust Privileged Remote Access - Panel Detection

BeyondTrust Privileged Remote Access login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """BeyondTrust Privileged Remote Access login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name'...

Bitrix Site Manager - Log File Disclosure Detection

Detected Bitrix Site Manager log files, potentially exposing sensitive information including database credentials, file paths, SQL queries, and user session data. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Bitrix Site Manager log files, potentially exposing sensitive information...

Black Duck Login Panel - Detect

Black Duck login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Black Duck login panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Black Duck Login Panel - Detect',...

Blazor Boot File Disclosure Detection

Exposed Blazor Boot a web framework developed by Microsoft config file. !/usr/bin/env python3 -- coding: utf-8 -- """Exposed Blazor Boot a web framework developed by Microsoft config file.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Blinko - Login Panel Detection

Detected A Blinko self-hosted personal note application login panel. !/usr/bin/env python3 -- coding: utf-8 -- """Detected A Blinko self-hosted personal note application login panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

Blue Ocean Excellence - Local File Inclusion Detection

Blue Ocean Excellence is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Blue Ocean Excellence is vulnerable to local file inclusion.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

BoltCMS Login Panel - Detect

BoltCMS login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """BoltCMS login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'BoltCMS Login Panel - Detect', 'description': 'BoltCMS...

Botpress Admin Panel - Detect

Botpress admin panel was detected. Botpress is an open-source conversational AI platform for building chatbots and virtual assistants. !/usr/bin/env python3 -- coding: utf-8 -- """Botpress admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Bottle debug mode enabled Detection

Detects Bottle debug mode enabled. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Bottle debug mode enabled.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Bottle debug mode enabled Detection', 'description':...

WordPress Brandfolder - Open Redirect (RFI & LFI) Detection

WordPress Brandfolder is vulnerable to remote/local file inclusion and allows remote attackers to inject an arbitrary URL into the 'callback.php' endpoint via the 'wpabspath' parameter which will redirect the victim to it. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Brandfolder is...

Brickcom Camera - Unauthenticated Snapshot Access Detection

Detected Brickcom IP cameras was exposed live camera snapshots without authentication via the ONVIF media endpoint. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Brickcom IP cameras was exposed live camera snapshots without authentication via the ONVIF media endp.""" from kittysploit impo...

Brother Printer Panel - Detect

Brother printer web interface and management panel was detected. This template identifies exposed Brother printer panels that may be accessible without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Brother printer web interface and management panel was detected.""" from kittysploit...

Budibase - Admin Installer Detection

Detected Budibase admin setup checklist endpoint was publicly accessible with no admin user created, allowing unauthenticated users to complete setup and gain full platform control. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Budibase admin setup checklist endpoint was publicly accessib...

Buildbot Panel - Detect

Buildbot panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Buildbot panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Buildbot Panel - Detect', 'description': 'Buildbot pane...

Businesso Installer Exposure Detection

Businesso is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Businesso is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...

CAS Login Panel - Detect

CAS login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """CAS login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'CAS Login Panel - Detect', 'description': 'CAS login panel was...

cgit Web Interface - Detection

Detects cgit web interface for Git repositories. cgit is a hyperfast web frontend for Git repositories written in C. It provides a web-based interface to browse Git repositories, view commits, diffs, and files. cgit is designed to be publicly accessible for open source projects. However, detectin...

Chatwoot - Installation Detection

Detected chatwoot instance with the initial installation onboarding page accessible at /installation/onboarding, enabling unauthenticated users to create the first Super Admin account and gain full platform control. !/usr/bin/env python3 -- coding: utf-8 -- """Detected chatwoot instance with the...

Checkmarx CxSAST Login Panel - Detect

Checkmarx CxSAST login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Checkmarx CxSAST login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Checkmarx CxSAST Login Panel - Detect...

Check Point Mobile SSL VPN - Detect

Check Point Mobile SSL VPN was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Check Point Mobile SSL VPN was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Check Point Mobile SSL VPN - Detect',...

ChirpStack LoRaWAN Detection

Detects the presence of ChirpStack LoRaWAN Network-Server by identifying unique page characteristics in the HTML response. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of ChirpStack LoRaWAN Network-Server by identifying unique page characteristics in the HT.""" from kittysplo...

Chronos Panel - Detect

Chronos Login Panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Chronos Login Panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Chronos Panel - Detect', 'description': 'Chronos Login...

ChurchCRM - Setup Exposure Detection

ChurchCRM setup is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """ChurchCRM setup is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ChurchCRM - Setup Exposure Detection', 'description': 'ChurchCRM...