AWS S3 keys Leak Detection

AWS S3 keys are exposed. !/usr/bin/env python3 -- coding: utf-8 -- """AWS S3 keys are exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AWS S3 keys Leak Detection', 'description': 'AWS S3 keys are exposed.',...

WordPress Plugin WPML Version < 4.6.1 Cross-Site Scripting Detection

WordPress Plugin WPML Version 4.6.1 is vulnerable to RXSS via wplang parameter. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin WPML Version 4.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WordPress...

WordPress AddToAny Share Buttons Plugin - Full Path Disclosure Detection

The AddToAny Share Buttons plugin for WordPress was detected to be vulnerable to Full Path Disclosure, allowing unauthenticated access to the full application path. !/usr/bin/env python3 -- coding: utf-8 -- """The AddToAny Share Buttons plugin for WordPress was detected to be vulnerable to Full...

WordPress Plugin iThemes Security - Full Path Disclosure Detection

WordPress Plugin iThemes Security files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin iThemes Security files are publicly accessible...

WordPress Plugin GDPR Cookie Consent - Full Path Disclosure Detection

WordPress GDPR Cookie Consent cookie-law-info plugin is vulnerable to full path disclosure via direct access to plugin files. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress GDPR Cookie Consent cookie-law-info plugin is vulnerable to full path disclosure via direct access.""" from...

WordPress Custom Tables 3.4.4 - Cross-Site Scripting Detection

WordPress Custom Tables 3.4.4 plugin contains a cross-site scripting vulnerability via the key parameter. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Custom Tables 3.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

WordPress Plugin CodeArt Google MP3 Player - File Disclosure Download Detection

WordPress Plugin CodeArt Google MP3 Player allows an unauthenticated attacker to download file from server. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin CodeArt Google MP3 Player allows an unauthenticated attacker to download file from server.""" from kittysploit import from...

WordPress Google Analytics - Full Path Disclosure Detection

Detected WordPress Google Analytics Dashboard Plugin for WordPress by MonsterInsights, potentially revealing analytics data, file paths, and errors. !/usr/bin/env python3 -- coding: utf-8 -- """Detected WordPress Google Analytics Dashboard Plugin for WordPress by MonsterInsights, potentially...

WordPress Plugin Idx Broker Platinum Listing Detection

Searches for sensitive directories present in the idx-broker-platinum plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for sensitive directories present in the idx-broker-platinum plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

WordPress Plugin Max Mega Menu (megamenu) - Full Path Disclosure Detection

WordPress Plugin Max Mega Menu plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin Max Mega Menu plugin files are publicly...

Wordpress Plugin MStore API Detection

Searches for sensitive directories present in the mstore-api plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for sensitive directories present in the mstore-api plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

WordPress OceanWP - Full Path Disclosure Detection

WordPress OceanWP theme is vulnerable to full path disclosure via direct access to theme files. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress OceanWP theme is vulnerable to full path disclosure via direct access to theme files.""" from kittysploit import from lib.protocols.http.httpclien...

WordPress Popup Plugin Directory Listing Detection

Searches for sensitive directories present in the wordpress-popup plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for sensitive directories present in the wordpress-popup plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

WordPress SEO Plugin Rank Math - Full Path Disclosure Detection

WordPress Rank Math SEO plugin is vulnerable to full path disclosure via direct access to plugin files. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Rank Math SEO plugin is vulnerable to full path disclosure via direct access to plugin files.""" from kittysploit import from...

Reality Estate Multipurpose WP-Theme < 2.5.3 - Cross-Site Scripting Detection

Reflected XSS was discovered in the 'Reality | Estate Multipurpose WordPress Theme'. !/usr/bin/env python3 -- coding: utf-8 -- """Reflected XSS was discovered in the 'Reality | Estate Multipurpose WordPress Theme'.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

WordPress Coming Soon Page - Full Path Disclosure Detection

WordPress Coming Soon Page & Maintenance Mode plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Coming Soon Page & Maintenance Mode...

WordPress Plugin Safe SVG - Full Path Disclosure Detection

WordPress Safe SVG plugin is vulnerable to full path disclosure via direct access to plugin files. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Safe SVG plugin is vulnerable to full path disclosure via direct access to plugin files.""" from kittysploit import from...

Simple 301 Redirects - Full Path Disclosure Detection

Simple 301 Redirects WordPress plugin contains a full path disclosure vulnerability due to improper access restrictions in its source files, allowing unauthenticated attackers to retrieve full server paths and aiding exploitation. !/usr/bin/env python3 -- coding: utf-8 -- """Simple 301 Redirects...

WordPress Simple Custom CSS Plugin - Full Path Disclosure Detection

Detected WordPress Simple Custom CSS plugin internal file system path was exposed through direct file access. !/usr/bin/env python3 -- coding: utf-8 -- """Detected WordPress Simple Custom CSS plugin internal file system path was exposed through direct file access.""" from kittysploit import from...

Email Verification for WooCommerce < 1.8.2 - Loose Comparison to Authentication Bypass Detection

Email Verification for WooCommerce Wordpress plugin prior to version 1.8.2 contains a loose comparison issue which could allow any user to log in as administrator. !/usr/bin/env python3 -- coding: utf-8 -- """Email Verification for WooCommerce Wordpress plugin prior to version 1.""" import re fro...

WordPress WPForms - Full Path Disclosure Detection

WordPress Plugin WPForms files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin WPForms files are publicly accessible without ABSPATH...

WordPress WPFront Scroll Top - Full Path Disclosure Detection

WordPress Plugin WPFront Scroll Top plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin WPFront Scroll Top plugin files are...

WordPress WPS Hide Login - Error Log Disclosure Detection

Detected whether the WPS Hide Login plugin’s /classes/ directory was exposed with directory listing enabled due to server misconfiguration, potentially disclosing PHP error logs or source code. !/usr/bin/env python3 -- coding: utf-8 -- """Detected whether the WPS Hide Login plugin’s /classes/...

WSO2 <5.8.0 - Server Side Request Forgery Detection

WSO2 prior to version 5.8.0 is susceptible to a server-side request forgery vulnerability. This vulnerability can be exploited by misusing the UI gadgets loading capability of the shindig web application. An attacker can alter a specific URL in the request causing the server to initiate a GET...

WSO2 Products - Detect

Try to detect the presence of a WSO2 products instance via the version endpoint !/usr/bin/env python3 -- coding: utf-8 -- """Try to detect the presence of a WSO2 products instance via the version endpoint.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Wuzhicms Detected

Wuzhicms was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Wuzhicms was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Wuzhicms Detected', 'description': 'Wuzhicms was detected.', 'author':...

Xeams Admin Console Login Panel - Detect

Xeams Admin Console login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Xeams Admin Console login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Xeams Admin Console Login Panel...

Xerox Fuji/VersaLink Login - Panel Detection

Xerox Fuji / VersaLink Login Panel was discovered !/usr/bin/env python3 -- coding: utf-8 -- """Xerox Fuji / VersaLink Login Panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Xerox Fuji/VersaLink...

XPhone Connect Admin Interface - Detect

Detects the presence of the XPhone Connect admin interface. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of the XPhone Connect admin interface.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

View Yii Debugger Information Detection

Detects potential exposure to Yii Debugger information. !/usr/bin/env python3 -- coding: utf-8 -- """Detects potential exposure to Yii Debugger information.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'View Yii...

Ymhome-detect

Detects Ymhome-detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Ymhome-detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ymhome-detect', 'description': 'Detects Ymhome-detect.', 'author': 'KittySplo...

YonBIP - Arbitrary File Read Detection

There is an arbitrary file reading vulnerability in yonbiplogin, the advanced version of YonBIP !/usr/bin/env python3 -- coding: utf-8 -- """There is an arbitrary file reading vulnerability in yonbiplogin, the advanced version of YonBIP.""" import re from kittysploit import from...

YPAREO Panel - Detect

YPAREO was detected — an Enterprise Resource Planning system. !/usr/bin/env python3 -- coding: utf-8 -- """YPAREO was detected — an Enterprise Resource Planning system.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Zebra Printer Detect

Zebra Printer panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Zebra Printer panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Zebra Printer Detect', 'description': 'Zebra Printer...

Yunanbao Cloud Box FastJson - Deserialization Remote Code Execution Detection

The authService interface of Cloud Box uses the vulnerable fastjson component. Unauthorized attackers can launch attacks on Cloud Box through the fastjson serialization vulnerability to obtain server permissions. !/usr/bin/env python3 -- coding: utf-8 -- """The authService interface of Cloud Box...

Zentral Panel - Detect

Zentral panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Zentral panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Zentral Panel - Detect', 'description': 'Zentral panel was...

ZeroShell Panel - Detect

ZeroShell panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ZeroShell panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ZeroShell Panel - Detect', 'description': 'ZeroShell panel was...

Zhiyuan Oa A6-s info Leak Detection

Detects Zhiyuan Oa A6-s info Leak. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Zhiyuan Oa A6-s info Leak.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Zhiyuan Oa A6-s info Leak Detection', 'description':...

ZTE Panel - Detect

ZTE panel was detected. ZTE Corporation is a global leader in telecommunications and information technology. Founded in 1985 and listed on both the Hong Kong and Shenzhen Stock Exchanges, the company has been committed to providing innovative technologies and integrated solutions for global...

Zzzcms 1.75 - Information Disclosure Detection

There is a rather strange file that directly echoes some content belonging to the inaccessible zzzconfig.php. The information leakage file is located in plugins\webuploader\js\webconfig.php, and the management path name of the management background can be obtained directly. No need to blast admin...

ActiveMQ OpenWire Transport Detection

OpenWire is the native protocol that Apache ActiveMQ uses. It is designed for performance and size on the wire - sacrificing some ease of implementation with higher performance and reduced network bandwidth as a priority. !/usr/bin/env python3 -- coding: utf-8 -- """OpenWire is the native protoco...

AFP Server Detect

Detects AFP Server Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects AFP Server Detect.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'AFP Server Detect', 'description':...

BGP Detection

The remote host is running BGP, a popular routing protocol. This indicates that the remote host is probably a network router. !/usr/bin/env python3 -- coding: utf-8 -- """The remote host is running BGP, a popular routing protocol.""" import socket from kittysploit import from...

BlackJumboDog FTP Service - Detect

BlackJumboDog FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """BlackJumboDog FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'BlackJumboDo...

Checkmk Agent Info Disclosure Detection

The Checkmk agent had exposed sensitive system information on TCP port 6556 without requiring authentication. !/usr/bin/env python3 -- coding: utf-8 -- """The Checkmk agent had exposed sensitive system information on TCP port 6556 without requiring authentication.""" import socket from kittysploi...

ClickHouse - Unauthorized Access Detection

ClickHouse was able to be accessed with no required authentication in place. !/usr/bin/env python3 -- coding: utf-8 -- """ClickHouse was able to be accessed with no required authentication in place.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import...

Microsoft .NET Remoting httpd - Detect

Microsoft .NET Remoting httpd was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Microsoft .""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'Microsoft .NET Remoting httpd -...

Exim - Detect

Exim can accept messages from remote hosts using SMTP over TCP/IP, and as well as from local processes. It handles local deliveries to mailbox files or to pipes attached to commands, as well as remote SMTP deliveries to other hosts. !/usr/bin/env python3 -- coding: utf-8 -- """Exim can accept...

GasPot Honeypot - Detect

A GasPot honeypot has been identified. The response to the '^AI21400' command differs from real installations, signaling a possible deceptive setup. !/usr/bin/env python3 -- coding: utf-8 -- """A GasPot honeypot has been identified.""" import socket from kittysploit import from...

GNU Inetutils FTPd Detect

The File Transfer Protocol FTP is a standard network protocol used to transfer computer files between a client and server on a computer network. !/usr/bin/env python3 -- coding: utf-8 -- """The File Transfer Protocol FTP is a standard network protocol used to transfer computer files between a...