Snipe-IT Panel - Detect

Snipe-IT panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Snipe-IT panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Snipe-IT Panel - Detect', 'description': 'Snipe-IT panel was...

Snoop Servlet - Information Disclosure Detection

The Snoop Servlet returns information about the HTTP request itself and sometimes. It could help an attacker to prepare more advanced attacks. !/usr/bin/env python3 -- coding: utf-8 -- """The Snoop Servlet returns information about the HTTP request itself and sometimes.""" from kittysploit import...

SolarWinds Orion Login Panel - Detect

SolarWinds Orion login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SolarWinds Orion login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SolarWinds Orion Login Panel - Detect...

SolarWinds Serv-U File Server Panel - Detect

SolarWinds Serv-U File Server panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SolarWinds Serv-U File Server panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SolarWinds...

Somansa DLP Login Panel - Detect

Somansa DLP login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Somansa DLP login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Somansa DLP Login Panel - Detect', 'description...

SonicWall Analytics - Login Panel Detection

SonicWall Analytics formerly SGMS is SonicWall's centralised network security analytics and reporting platform used to aggregate and visualise threat data across SonicWall firewall deployments. !/usr/bin/env python3 -- coding: utf-8 -- """SonicWall Analytics formerly SGMS is SonicWall's centralis...

SonicWall Secure Mobile Access (SMA) Panel - Detection

Detected SonicWall Secure Mobile Access SMA appliances — an enterprise SSL-VPN gateway for secure remote access SMA 1000/6200/7200 series. !/usr/bin/env python3 -- coding: utf-8 -- """Detected SonicWall Secure Mobile Access SMA appliances — an enterprise SSL-VPN gateway for secure remote acc."""...

Sophos Firewall Login Panel - Detect

Sophos Firewall login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Sophos Firewall login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sophos Firewall Login Panel - Detect',...

Sophos Web Appliance Detection

Detects Sophos Web Appliance. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Sophos Web Appliance.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sophos Web Appliance Detection', 'description': 'Detects Sophos...

SOUND4 IMPACT/FIRST/PULSE/Eco <= 2.x - Authentication Bypass Detection

The application suffers from an SQL Injection vulnerability. Input passed through the 'username' POST parameter in 'index.php' is not properly sanitised before being returned to the user or used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code and...

SphinxOnline Panel - Detect

SphinxOnline Login Panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SphinxOnline Login Panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SphinxOnline Panel - Detect', 'description':...

Sphinx Search Config - Exposure Detection

sphinx.conf file contains SQL credentials and is publicly accessible. !/usr/bin/env python3 -- coding: utf-8 -- """sphinx.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sphinx Search Config - Exposure Detection',...

Splunk Enterprise Login Panel - Detect

Splunk Enterprise login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Splunk Enterprise login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Splunk Enterprise Login Panel -...

Detect Springboot Dump Actuator

Performs a thread dump !/usr/bin/env python3 -- coding: utf-8 -- """Performs a thread dump.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect Springboot Dump Actuator', 'description': 'Performs a thread dump',...

Detect Springboot httptrace

View recent HTTP requests and responses !/usr/bin/env python3 -- coding: utf-8 -- """View recent HTTP requests and responses.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect Springboot httptrace', 'description...

SpringBoot WhiteLabel Error Page - Detect

Detects SpringBoot WhiteLabel Error Page - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects SpringBoot WhiteLabel Error Page - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SpringBoot WhiteLabel...

Java Spring Detection

Detects Java Spring Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Java Spring Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Java Spring Detection', 'description': 'Detects Java Spring...

Star Micronics Network Utility Panel - Detect

Star Micronics Network Utility panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Star Micronics Network Utility panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Star Micronics Networ...

SteVe - Cross-Site Scripting Detection

SteVe contains a cross-site scripting vulnerability. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks. !/usr/bin/env python3 --...

Strider CD Panel - Detect

Strider CD panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Strider CD panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Strider CD Panel - Detect', 'description': 'Strider CD panel...

Apache Struts setup in Debug-Mode Detection

Apache Struts debug mode is enabled. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Struts debug mode is enabled.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Struts setup in Debug-Mode Detection',...

StyleCi Yaml File Disclosure Detection

Detects StyleCi Yaml File Disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects StyleCi Yaml File Disclosure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'StyleCi Yaml File Disclosure Detection',...

SuiteCRM Installer Exposure Detection

SuiteCRM is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """SuiteCRM is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Sunbird DCIM - Detect

Sunbird DCIM login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Sunbird DCIM login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sunbird DCIM - Detect', 'description': 'Sunbi...

SUSE Manager Server - Panel Detection

SUSE Manager login panel detected. !/usr/bin/env python3 -- coding: utf-8 -- """SUSE Manager login panel detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SUSE Manager Server - Panel Detection', 'description'...

Switching Protocol Detection

Detects Switching Protocol Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Switching Protocol Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Switching Protocol Detection', 'description':...

Symantec Data Loss Prevention Login Panel - Detect

Symantec Data Loss Prevention login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Symantec Data Loss Prevention login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Symantec Da...

Symantec Identity Manager Management Console Detection

Management Console to administrate Symantec Identity Manager environment, authentication is sometimes disabled. !/usr/bin/env python3 -- coding: utf-8 -- """Management Console to administrate Symantec Identity Manager environment, authentication is sometimes disabled.""" from kittysploit import...

Symfony Lock File - Exposure Detection

symfony.lock was found accessible, exposing a full list of installed Composer packages, library versions, and metadata for a Symfony-based PHP application. Disclosure of this file can provide insight into the application's attack surface, potentially revealing vulnerable or outdated dependencies...

Symfony properties.ini File Disclosure Detection

Detects Symfony properties.ini File Disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Symfony properties.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Symfony properties.ini File Disclosure...

Synopsys Coverity Panel Detection

Coverity® is a fast, accurate, and highly scalable static analysis SAST solution that helps development and security teams address security and quality defects early in the software development life cycle SDLC, track and manage risks across the application portfolio, and ensure compliance with...

Tasmota Installer Exposure Detection

Tasmota is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Tasmota is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

WordPress SVG Support - Full Path Disclosure Detection

The WordPress SVG Support plugin was detected to have publicly accessible PHP files without ABSPATH protection, which exposed sensitive server path information. Direct access to vendor/composer files triggered PHP fatal errors that revealed the full WordPress filesystem path. !/usr/bin/env python...

WordPress Table of Contents Plus - Full Path Disclosure Detection

WordPress Table of Contents Plus plugin is vulnerable to full path disclosure via direct access to plugin files. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Table of Contents Plus plugin is vulnerable to full path disclosure via direct access to plugin file.""" from kittysploit import...

WordPress The Events Calendar - Full Path Disclosure Detection

WordPress The Events Calendar plugin is vulnerable to full path disclosure via direct access to plugin files. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress The Events Calendar plugin is vulnerable to full path disclosure via direct access to plugin files.""" from kittysploit import from...

WordPress Plugin SSL Insecure Content Fixer - Full Path Disclosure Detection

WordPress SSL Insecure Content Fixer plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress SSL Insecure Content Fixer plugin files are...

WordPress WPtouch 3.7.5 - Open Redirect Detection

WordPress WPtouch 3.7.5 is affected by an Open Redirect issue. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress WPtouch 3.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WordPress WPtouch 3.7.5 - Ope...

WordPress tutor 1.5.3 - Local File Inclusion Detection

WordPress tutor.1.5.3 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress tutor.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WordPress tutor 1.5.3 - Local File...

WordPress Vault 0.8.6.6 - Local File Inclusion Detection

WordPress Vault 0.8.6.6 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Vault 0.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WordPress Vault 0.8.6.6 - Local...

WordPress W3 Total Cache - Cache Files Exposure Detection

Detects publicly accessible W3 Total Cache database cache files in the wp-content/w3tc/dbcache/ directory. When database caching to disk is enabled, these files contain raw SQL query results, potentially exposing sensitive data such as user details, password hashes, emails, or other database...

WordPress W3 Total Cache - Full Path Disclosure Detection

WordPress W3 Total Cache plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress W3 Total Cache plugin files are publicly accessible withou...

Woocommerce - PDF Invoice Exposure Detection

A vulnerability in Woocommerce allows remote unauthenticated attackers to access company invoices and other sensitive information. !/usr/bin/env python3 -- coding: utf-8 -- """A vulnerability in Woocommerce allows remote unauthenticated attackers to access company invoices and other se.""" from...

WordPress Plugin WP Statistics Error Log Disclosure Detection

Detected exposed log files generated by the WP Statistics !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed log files generated by the WP Statistics.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

WordPress Yoast SEO - Full Path Disclosure Detection

WordPress Yoast SEO plugin is vulnerable to full path disclosure via direct access to plugin files. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Yoast SEO plugin is vulnerable to full path disclosure via direct access to plugin files.""" from kittysploit import from...

WS FTP File Disclosure Detection

WS FTP file is disclosed. !/usr/bin/env python3 -- coding: utf-8 -- """WS FTP file is disclosed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WS FTP File Disclosure Detection', 'description': 'WS FTP file is...

Xibo CMS Login Panel - Detect

Xibo CMS login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Xibo CMS login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Xibo CMS Login Panel - Detect', 'description': 'Xibo...

XP Webcam Viewer Page Detection

Searches for exposed webcams by querying the /mobile.html endpoint and the existence of webcamXP in the body. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for exposed webcams by querying the /mobile.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

XXLJOB Admin Login Panel - Detect

XXLJOB admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """XXLJOB admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'XXLJOB Admin Login Panel - Detect',...

Yopass Panel - Detect

Yopass panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Yopass panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Yopass Panel - Detect', 'description': 'Yopass panel was detected.',...

Zammad Helpdesk Panel - Detect

Zammad is an open source helpdesk and customer support system that provides ticket management, live chat, and knowledge base functionality. This template detects exposed Zammad installations. !/usr/bin/env python3 -- coding: utf-8 -- """Zammad is an open source helpdesk and customer support syste...