Toshiba TopAccess Panel - Detect

Detects Toshiba TopAccess Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Toshiba TopAccess Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Toshiba TopAccess Panel - Detect',...

TOTOLink Router - Remote Command Execution Detection

TOTOLink routers are vulnerable to unauthenticated remote command execution via the /boaform/formWsc endpoint. An attacker can inject OS commands through the localPin parameter. !/usr/bin/env python3 -- coding: utf-8 -- """TOTOLink routers are vulnerable to unauthenticated remote command executio...

TOTOLINK N150RT - Password Exposure Detection

Detects password exposure vulnerability in TOTOLINK N150RT router where sensitive credentials are exposed in the password.htm page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects password exposure vulnerability in TOTOLINK N150RT router where sensitive credentials are exposed in t.""" from...

Tox Configuration File - Detect

Tox configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Tox configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tox Configuration File - Detect', 'description':...

Traccar Panel - Detect

Traccar panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Traccar panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Traccar Panel - Detect', 'description': 'Traccar panel was...

Detect tor SOCKS proxy

Detects Detect tor SOCKS proxy. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Detect tor SOCKS proxy.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect tor SOCKS proxy', 'description': 'Detects Detect tor...

TrueNAS Panel - Detect

TrueNAS scale is a free and open-source NAS solution !/usr/bin/env python3 -- coding: utf-8 -- """TrueNAS scale is a free and open-source NAS solution.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'TrueNAS Panel -...

T-Up OpenFrame Detection

Detects T-Up OpenFrame. !/usr/bin/env python3 -- coding: utf-8 -- """Detects T-Up OpenFrame.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'T-Up OpenFrame Detection', 'description': 'Detects T-Up OpenFrame.',...

Twig PHP <2.4.4 template engine - SSTI Detection

A vulnerability in Twig PHP allows remote attackers to cause the product to execute arbitrary commands via an SSTI vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """A vulnerability in Twig PHP allows remote attackers to cause the product to execute arbitrary commands via an .""" from...

Twig Runtime Error - Page Detection

Detects Twig Runtime Error - Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Twig Runtime Error - Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Twig Runtime Error - Page Detection', 'description':...

FRPS Dashboard - Detect

FRPS Dashboard panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """FRPS Dashboard panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'FRPS Dashboard - Detect', 'description': 'FRPS...

Jenkins Dashboard - Unauthenticated Access Detection

Jenkins Dashboard is exposed to external users. !/usr/bin/env python3 -- coding: utf-8 -- """Jenkins Dashboard is exposed to external users.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Jenkins Dashboard -...

Unauthenticated Popup File Upload - Detect

Endpoints where files can be uploaded without authentication were detected. !/usr/bin/env python3 -- coding: utf-8 -- """Endpoints where files can be uploaded without authentication were detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

H3C Server - Unauthenticated Access Detection

H3C server was able to be accessed with no authentication requirements in place. !/usr/bin/env python3 -- coding: utf-8 -- """H3C server was able to be accessed with no authentication requirements in place.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

CKFinder - Unauthenticated Exposure Detection

The CKFinder file manager was found to be exposed without authentication, allowing unauthenticated users to directly access its web interface. Due to this misconfiguration, attackers were able to browse server directories, upload arbitrary files, and manage existing files. !/usr/bin/env python3 -...

KubeCost - Unauthenticated Dashboard Exposure Detection

KubeCost Dashboard is exposed to external users. !/usr/bin/env python3 -- coding: utf-8 -- """KubeCost Dashboard is exposed to external users.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'KubeCost - Unauthenticate...

MuleSoft DataWeave Interactive Learning Environment - Unauthenticated Access Detection

The MuleSoft DataWeave Interactive Learning Environment is publicly accessible without authentication !/usr/bin/env python3 -- coding: utf-8 -- """The MuleSoft DataWeave Interactive Learning Environment is publicly accessible without authentication.""" from kittysploit import from...

Selenium Grid Console - Detect

Selenium Grid Console panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Selenium Grid Console panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Selenium Grid Console - Detect',...

UniFi Wizard Installer Detection

UniFi Wizard is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """UniFi Wizard is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclien...

Universal Media Server v13.2.1 - Cross Site Scripting Detection

Universal Media Server v13.2.1 CMS v2.0 was discovered to contain a reflected cross-site scripting XSS vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """Universal Media Server v13.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

UrBackup Panel - Detect

Detects UrBackup Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects UrBackup Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'UrBackup Panel - Detect', 'description': 'Detects UrBacku...

V2924 Admin Login Panel - Detect

V2924 admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """V2924 admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'V2924 Admin Login Panel - Detect', 'description...

Versa Analytics Server Detection

Detects Versa Analytics Server Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Versa Analytics Server Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Versa Analytics Server Detection',...

viewLinc 5.1.2.367 - Carriage Return Line Feed Attack Detection

viewLinc 5.1.2.367 and sometimes 5.1.1.50 allows remote attackers to inject a carriage return line feed CRLF character into the responses returned by the product, which allows attackers to inject arbitrary HTTP headers into the response returned. !/usr/bin/env python3 -- coding: utf-8 --...

Vigor Login Panel - Detect

Vigor login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Vigor login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Vigor Login Panel - Detect', 'description': 'Vigor login...

Viminfo - File Disclosure Detection

Viminfo file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Viminfo file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Viminfo - File Disclosure Detection', 'description': 'Viminfo file wa...

Vince Login Panel - Detect

Vince products was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Vince products was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Vince Login Panel - Detect', 'description': 'Vince products was...

vLLM OpenAI-Compatible API - Unauthenticated Exposure Detection

Detects a vLLM inference server exposing its OpenAI-compatible API without authentication. The /v1/models endpoint returns the list of served models and is reachable by any unauthenticated client, allowing model enumeration and unauthorized inference resource abuse / cost and information exposure...

VMware HCX Login Panel - Detect

VMware HCX login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """VMware HCX login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'VMware HCX Login Panel - Detect', 'description':...

Voilà Panel - Detect

Voilà is an open-source tool that turns Jupyter Notebooks into standalone web applications. It is commonly used to share AI/ML dashboards and interactive data science tools. !/usr/bin/env python3 -- coding: utf-8 -- """Voilà is an open-source tool that turns Jupyter Notebooks into standalone web...

Visual Studio Code Settings - Credential Exposure Detection

Detected exposed Visual Studio Code configuration files that were accessible over HTTP, which could have led to credential leakage or sensitive workspace disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed Visual Studio Code configuration files that were accessible over HTTP...

Vtiger CRM - Detect

Detected a Vtiger CRM web application, a PHP-based platform that enabled businesses to increase sales wins, marketing ROI, and support satisfaction capabilities. !/usr/bin/env python3 -- coding: utf-8 -- """Detected a Vtiger CRM web application, a PHP-based platform that enabled businesses to...

WAGO PLC Panel - Detect

WAGO PLC panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """WAGO PLC panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WAGO PLC Panel - Detect', 'description': 'WAGO PLC panel was...

WAGO WebBased Management - Panel Detection

WAGO WebBased Management was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """WAGO WebBased Management was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WAGO WebBased Management - Panel...

Ecology OA CheckServer - SQL Injection Detection

Ecology OA system improperly filters incoming data from users, resulting in a SQL injection vulnerability. Remote and unauthenticated attackers can use this vulnerability to conduct SQL injection attacks and steal sensitive database information. !/usr/bin/env python3 -- coding: utf-8 -- """Ecolog...

Weave Scope Panel - Detect

Weave Scope panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Weave Scope panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Weave Scope Panel - Detect', 'description': 'Weave Scope...

Weblate Public Project - Exposure Detection

Weblate instance is publicly accessible. Public exposure of Weblate may lead to unauthorized access to translation projects, potential data leaks, credential exposure, or manipulation of open source localization data. Attackers can view available projects and access sensitive information if prope...

Websheets Configuration File - Detect

Websheets configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Websheets configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Websheets Configuration File - Detect...

Webtools Home Detection

Webtools panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Webtools panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Webtools Home Detection', 'description': 'Webtools panel was...

WebTrees Exposed Installation Detection

WebTrees is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """WebTrees is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Web Local Craft Terminal Login Panel - Detect

Web Local Craft Terminal login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Web Local Craft Terminal login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Web Local Craft...

Web Suite Detect

Detects Web Suite Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Web Suite Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Web Suite Detect', 'description': 'Detects Web Suite Detect.', 'author'...

Westermo Industrial Router - Login Panel Detection

Westermo industrial router web interface panel has been detected. !/usr/bin/env python3 -- coding: utf-8 -- """Westermo industrial router web interface panel has been detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Whatsup Gold Login Panel - Detect

Whatsup Gold login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Whatsup Gold login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Whatsup Gold Login Panel - Detect',...

Seeyon WooYun - Local File Inclusion Detection

Seeyon WooYun allows remote attackers to include the content of locally stored content and disclose it back to the attacker via local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Seeyon WooYun allows remote attackers to include the content of locally stored content and disclose it...

WordPress DB Backup Detection

WordPress DB Backup plugin exposes db file along with directory listing. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress DB Backup plugin exposes db file along with directory listing.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Wordpress DB Repair Exposed Detection

Discover enabled Wordpress repair page. !/usr/bin/env python3 -- coding: utf-8 -- """Discover enabled Wordpress repair page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Wordpress DB Repair Exposed Detection',...

WordPress Menu Image - Full Path Disclosure Detection

WordPress Plugin Menu Image plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin Menu Image plugin files are publicly accessible...

WordPress Readme File Detection

Detects WordPress Readme File. !/usr/bin/env python3 -- coding: utf-8 -- """Detects WordPress Readme File.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WordPress Readme File Detection', 'description': 'Detects...

WordPress LazyLoad Plugin - Full Path Disclosure Detection

WordPress Plugin LazyLoad files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin LazyLoad files are publicly accessible without ABSPATH...