WordPress Manage Calameo Publications 1.1.0 - Cross-Site Scripting Detection

WordPress Manage Calameo Publications 1.1.0 is vulnerable to reflected cross-site scripting via thickboxcontent.php and the attachmentid parameter. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Manage Calameo Publications 1.""" from kittysploit import from lib.protocols.http.httpclient...

Dockerrun AWS Configuration Page - Detect

Dockerrun AWS configuration page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Dockerrun AWS configuration page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dockerrun AWS Configuration...

HPE System Management Anonymous Access Detection

HPE system management anonymous access is enabled. !/usr/bin/env python3 -- coding: utf-8 -- """HPE system management anonymous access is enabled.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HPE System Management...

MantisBT Installation Exposure Detection

MantisBT is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """MantisBT is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Honeywell Scada Configuration File - Detect

Honeywell Scada configuration file was detected. The downloaded file opens with the file name and contains critical information about the destination address. !/usr/bin/env python3 -- coding: utf-8 -- """Honeywell Scada configuration file was detected.""" from kittysploit import from...

Prometheus Config API Endpoint Discovery Detection

A Prometheus config API endpoint was discovered. The config endpoint returns the loaded Prometheus configuration file along with the addresses of targets and alerting/discovery services alongside the credentials required to access them. Usually, Prometheus replaces the passwords in the credential...

KodExplorer-detect

Detects KodExplorer-detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects KodExplorer-detect.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'KodExplorer-detect', 'description': 'Detects...

Trust Center Page - Detect

Detected the presence of Trust Center pages or subdomains provided by Safebase, Vanta, or TrustCloud. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the presence of Trust Center pages or subdomains provided by Safebase, Vanta, or TrustCloud.""" from kittysploit import from...

FastMile 5G Gateway Panel - Detect

FastMile 5G Gateway web interface was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """FastMile 5G Gateway web interface was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'FastMile 5G Gateway Pan...

Horde Login Panel - Detect

Horde login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Horde login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Horde Login Panel - Detect', 'description': 'Horde login...

OpenBullet 2 - Panel Detection

Openbullet was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Openbullet was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OpenBullet 2 - Panel Detection', 'description': 'Openbullet was detected....

MikroTik FTP server Detect

The File Transfer Protocol FTP is a standard network protocol used to transfer computer files between a client and server on a computer network. !/usr/bin/env python3 -- coding: utf-8 -- """The File Transfer Protocol FTP is a standard network protocol used to transfer computer files between a...

YPAREO Panel - Detect

YPAREO was detected — an Enterprise Resource Planning system. !/usr/bin/env python3 -- coding: utf-8 -- """YPAREO was detected — an Enterprise Resource Planning system.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Zipline - Installer Detection

Zipline installer setup was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Zipline installer setup was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Zipline - Installer Detection', 'description':...

Apache Sling - Detect

Detects a Apache Sling, a Java-based web framework designed for content-centric applications, using a RESTful approach to map URL requests directly to resources in a Java Content Repository JCR. !/usr/bin/env python3 -- coding: utf-8 -- """Detects a Apache Sling, a Java-based web framework design...

Apache Ambari Exposure Admin Login Panel Detection

An Apache Ambari panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """An Apache Ambari panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Ambari Exposure Admin Login Panel...

JBoss jBPM Administration Console Login Panel - Detect

JBoss jBPM Administration Console login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """JBoss jBPM Administration Console login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'JBo...

Elgg - Installation Detection

Elgg Installation was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Elgg Installation was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Elgg - Installation Detection', 'description': 'Elgg...

Oracle Integrated Lights Out Manager Login Panel - Detect

Oracle Integrated Lights Out Manager login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Oracle Integrated Lights Out Manager login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name'...

Materialize CSS - Detect

Detected the presence of Materialize, a modern responsive front-end framework based on Material Design. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the presence of Materialize, a modern responsive front-end framework based on Material Design.""" import re from kittysploit import from...

ntop Network Traffix Exposed Detection

Detects ntop Network Traffix Exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Detects ntop Network Traffix Exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ntop Network Traffix Exposed Detection',...

KLR 300N Router - Exposed Installation Detection

Home router wireless KLR 300N setup page were Detected. !/usr/bin/env python3 -- coding: utf-8 -- """Home router wireless KLR 300N setup page were Detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'KLR 300N...

WordPress Weekender Newspaper 9.0 - Open Redirect Detection

WordPress Weekender Newspaper theme 9.0 contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Weekender...

Deskpro Private Controller - Default Page Detect

Deskpro Private Controller default page detected. !/usr/bin/env python3 -- coding: utf-8 -- """Deskpro Private Controller default page detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Deskpro Private...

Jira Unauthenticated Projects Detection

Detects Jira Unauthenticated Projects. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Jira Unauthenticated Projects.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Jira Unauthenticated Projects Detection',...

Detect Jenkins in Debug Mode with Stack Traces Enabled

Module identified that the affected host is running an instance of Jenkins in debug mode, as a result stack traces are enabled. !/usr/bin/env python3 -- coding: utf-8 -- """Module identified that the affected host is running an instance of Jenkins in debug mode, as a result stack tr.""" from...

Apache HTTP Server End-of-Life - Detect

Detected Apache HTTP Server versions that have reached End-of-Life EOL and no longer receive security updates. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Apache HTTP Server versions that have reached End-of-Life EOL and no longer receive security update.""" from kittysploit import from...

Fastly CDN Debug Headers Exposure Detection

Detected Fastly CDN debug headers being exposed when the Fastly-Debug header was sent in a request.This exposure disclosed sensitive debugging information such as cache paths, TTL values, content digests, surrogate keys, and cache server identities, which could help attackers understand CDN...

Brickcom Camera - Unauthenticated Snapshot Access Detection

Detected Brickcom IP cameras was exposed live camera snapshots without authentication via the ONVIF media endpoint. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Brickcom IP cameras was exposed live camera snapshots without authentication via the ONVIF media endp.""" from kittysploit impo...

BeyondTrust Login Panel - Detect

BeyondTrust login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """BeyondTrust login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'BeyondTrust Login Panel - Detect', 'description...

Wordpress Brandfolder - Remote/Local File Inclusion Detection

WordPress Brandfolder allows remote attackers to access arbitrary files that reside on the local and remote server and disclose their content. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Brandfolder allows remote attackers to access arbitrary files that reside on the local and remote...

OpenEMR Setup Installation Page - Exposure Detection

Detects exposed OpenEMR setup installation pages which could allow unauthorized access or information disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed OpenEMR setup installation pages which could allow unauthorized access or information disclosu.""" from kittysploit import...

OKIOK S-Filer Portal Login Panel - Detect

OKIOK S-Filer Portal login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """OKIOK S-Filer Portal login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OKIOK S-Filer Portal Login...

Sharp Multifunction Printers - Local File Inclusion Detection

It was observed that Sharp printers are vulnerable to a local file inclusion without authentication. Any attacker can read any file located in the printer. !/usr/bin/env python3 -- coding: utf-8 -- """It was observed that Sharp printers are vulnerable to a local file inclusion without...

Blesta Installer Exposure Detection

Blesta is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Blesta is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

AWS Configuration - Detect

AWS config found via /.aws/config. !/usr/bin/env python3 -- coding: utf-8 -- """AWS config found via /.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AWS Configuration - Detect', 'description': 'AWS confi...

PHP-FPM Configuration Page - Detect

PHP-FPM configuration page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """PHP-FPM configuration page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PHP-FPM Configuration Page - Detect',...

Saia PCD Web-Server Configuration Page - Detect

Saia PCD Web-Server configuration page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Saia PCD Web-Server configuration page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Saia PCD Web-Serv...

Chanjet TPluse Ufida.T.SM.Login.UIP - SQL injection Detection

Chanjet TPluse application has a SQL injection vulnerability, which can be used by attackers to obtain sensitive information in the database. !/usr/bin/env python3 -- coding: utf-8 -- """Chanjet TPluse application has a SQL injection vulnerability, which can be used by attackers to obtain...

FusionAuth Exposed Admin Setup Detection

FusionAuth Admin Setup is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """FusionAuth Admin Setup is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'FusionAuth Exposed Admin Setup Detection',...

Honeywell Excel Web Control Login Panel - Detect

Honeywell Excel Web Control login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Honeywell Excel Web Control login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Honeywell Excel...

Gradio - Open Redirect Detection

An open redirect vulnerability in Gradio allows attackers to craft malicious URLs that redirect users to external, potentially harmful sites without proper validation. !/usr/bin/env python3 -- coding: utf-8 -- """An open redirect vulnerability in Gradio allows attackers to craft malicious URLs th...

WordPress Plugin "AffiliateWP -- Allowed Products" Log Disclosure Detection

Exposed debug log in AffiliateWP Wordpress Plugin !/usr/bin/env python3 -- coding: utf-8 -- """Exposed debug log in AffiliateWP Wordpress Plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WordPress Plugin...

Cargo Lock Packages Disclosure Detection

Detects Cargo Lock Packages Disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Cargo Lock Packages Disclosure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cargo Lock Packages Disclosure Detection',...

ClearML Panel - Detect

ClearML was detected. ClearML is an open-source MLOps platform for experiment tracking, model management, and pipeline orchestration. Exposed instances may allow access to ML experiments, models, and infrastructure configurations. !/usr/bin/env python3 -- coding: utf-8 -- """ClearML was...

SolarWinds Serv-U File Server Panel - Detect

SolarWinds Serv-U File Server panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SolarWinds Serv-U File Server panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SolarWinds...

Oracle WebLogic UDDI Explorer Panel - Detect

Oracle WebLogic UDDI Explorer panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Oracle WebLogic UDDI Explorer panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Oracle WebLogic UDDI...

Dericam Login Panel - Detect

Dericam login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Dericam login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dericam Login Panel - Detect', 'description': 'Dericam...

Netsweeper 4.0.9 - Open Redirect Detection

Netsweeper 4.0.9 contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """Netsweeper 4.""" import re from kittysploit...

Atlassian Bitbucket Public Repository Exposure Detection

Bitbucket Public Repository is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Bitbucket Public Repository is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Atlassian Bitbucket Public Repository...