CouchDB Admin Default - Detect

CouchDB is susceptible to requests in the context of an admin user. !/usr/bin/env python3 -- coding: utf-8 -- """CouchDB is susceptible to requests in the context of an admin user.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: inf...

File Browser Dashboard - Unauthenticated Access Detection

File Browser dashboard is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """File Browser dashboard is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'File Browser Dashboard - Unauthenticated Access...

Exposed Magento 2 API Detection

The API in Magento 2 can be accessed by the world without providing credentials. Through the API information like storefront, hidden products including prices are exposed. !/usr/bin/env python3 -- coding: utf-8 -- """The API in Magento 2 can be accessed by the world without providing...

Wordpress Wordfence - Cross-Site Scripting Detection

Wordpress Wordfence is vulnerable to cross-site scripting. !/usr/bin/env python3 -- coding: utf-8 -- """Wordpress Wordfence is vulnerable to cross-site scripting.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Sitecore Default Page - Detect

Detect Sitecore Content Management System CMS. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Sitecore Content Management System CMS.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sitecore Default Page -...

Hitron Technologies Router Login Panel - Detect

Hitron Technologies router login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Hitron Technologies router login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Hitron Technologi...

HCP Anywhere - Detect

HCP Anywhere was detected. !/usr/bin/env python3 -- coding: utf-8 -- """HCP Anywhere was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HCP Anywhere - Detect', 'description': 'HCP Anywhere was detected.',...

Product Input Fields for WooCommerce < 1.2.7 - Unauthenticated File Download Detection

WordPress WooCommerce 1.2.7 is susceptible to file download vulnerabilities. The lack of authorization checks in the handledownloads function hooked to admininit could allow unauthenticated users to download arbitrary files from the blog using a path traversal payload. !/usr/bin/env python3 --...

Graphite Browser Login Panel - Detect

Graphite Browser login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Graphite Browser login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Graphite Browser Login Panel - Detect...

Oracle Application Server Panel - Detect

Oracle Application Server login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Oracle Application Server login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Oracle Application...

Odoo CMS - Open Redirect Detection

Odoo CMS contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """Odoo CMS contains an open redirect vulnerability."""...

Mailpit App - Information Disclosure Detection

Mailpit exposes the /api/v1/messages endpoint which can leak email metadata or full email content without authentication, leading to information disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Mailpit exposes the /api/v1/messages endpoint which can leak email metadata or full email conte...

NoVus IP Login Panel - Detect

NoVus IP login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """NoVus IP login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'NoVus IP Login Panel - Detect', 'description': 'NoVus...

WordPress Ivory Search - Full Path Disclosure Detection

WordPress Plugin Ivory Search plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin Ivory Search plugin files are publicly...

Wordfence - Full Path Disclosure Detection

Wordfence WordPress plugin contains a full path disclosure vulnerability due to improper access restrictions in its source files, allowing unauthenticated attackers to retrieve full server paths and aiding exploitation. !/usr/bin/env python3 -- coding: utf-8 -- """Wordfence WordPress plugin...

Cherry Plugin < 1.2.7 - Arbitrary File Retrieval and File Upload Detection

WordPress plugin Cherry 1.2.7 contains an unauthenticated file upload and download vulnerability, allowing attackers to upload and download arbitrary files. This could result in attacker uploading backdoor shell scripts or downloading the wp-config.php file. !/usr/bin/env python3 -- coding: utf-8...

OA E-Office officeserver.php Arbitrary File Read Detection

There is an arbitrary file reading vulnerability in the OA E-Office officeserver.php file. An attacker can download any file on the server through the vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """There is an arbitrary file reading vulnerability in the OA E-Office officeserver."""...

Tasmota Configuration Exposure Detection

Tasmota configuration is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Tasmota configuration is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tasmota Configuration Exposure Detection', 'description...

ActiveAdmin Admin Dasboard Exposure Detection

An ActiveAdmin Admin dashboard was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """An ActiveAdmin Admin dashboard was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ActiveAdmin Admin Dasboard...

Sangfor Application sys_user.conf Account Password Leakage Detection

Sangfor application delivery management system file sysuser.conf can be directly accessed without authorization, resulting in leakage of account and password !/usr/bin/env python3 -- coding: utf-8 -- """Sangfor application delivery management system file sysuser.""" from kittysploit import from...

Live Helper Chat Admin Login Panel - Detect

Live Helper Chat admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Live Helper Chat admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Live Helper Chat Admin...

Pure-FTPd Service - Detect

Pure-FTPd FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Pure-FTPd FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'Pure-FTPd Service -...

Flutter Web Application - Detect

Detect flutter web apps looking for flutterbootstrap.js,main.dart.js and flutterserviceworker.js files. !/usr/bin/env python3 -- coding: utf-8 -- """Detect flutter web apps looking for flutterbootstrap.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

CloudCenter Installer Exposure Detection

CloudCenter is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """CloudCenter is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

SOGo Detect

This template will detect a running SOGo instance !/usr/bin/env python3 -- coding: utf-8 -- """This template will detect a running SOGo instance.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SOGo Detect',...

Caton Network Manager System Login Panel - Detect

Caton Network Manager System login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Caton Network Manager System login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Caton Network...

Veeam Backup Enterprise Manager Login - Detect

Veeam Backup Enterprise Manager Login !/usr/bin/env python3 -- coding: utf-8 -- """Veeam Backup Enterprise Manager Login.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Veeam Backup Enterprise Manager Login - Detect...

airCube Login - Detect

airCube login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """airCube login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'airCube Login - Detect', 'description': 'airCube login...

Bitrix Login Panel Detection

Bitrix24 is a unified work space that places a complete set of business tools into a single, intuitive interface. !/usr/bin/env python3 -- coding: utf-8 -- """Bitrix24 is a unified work space that places a complete set of business tools into a single, intuitive interfa.""" from kittysploit import...

EShop Installer Exposure Detection

EShop is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """EShop is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

qdPM 9.2 - DB Credentials Exposure Detection

qdPM 9.2 database credentials were discovered. !/usr/bin/env python3 -- coding: utf-8 -- """qdPM 9.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'qdPM 9.2 - DB Credentials Exposure Detection', 'description': 'qdPM...

Readarr Dashboard - Unauthenticated Detection

Exposure of Readarr dashboard which can lead to sensitive information disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Exposure of Readarr dashboard which can lead to sensitive information disclosure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Sekolahku CMS - Detect

Sekolahku CMS is a free, open-source, and easy-to-use content management system CMS for schools and educational institutions. It is designed to help schools manage their websites, manage student information, and manage school activities. !/usr/bin/env python3 -- coding: utf-8 -- """Sekolahku CMS ...

Poste.io - Installer Detection

Poste.io is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Poste.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Poste.io - Installer Detection',...

Seeyon WooYun - Local File Inclusion Detection

Seeyon WooYun allows remote attackers to include the content of locally stored content and disclose it back to the attacker via local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Seeyon WooYun allows remote attackers to include the content of locally stored content and disclose it...

Visual Studio Code Settings - Credential Exposure Detection

Detected exposed Visual Studio Code configuration files that were accessible over HTTP, which could have led to credential leakage or sensitive workspace disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed Visual Studio Code configuration files that were accessible over HTTP...

Jeecg-Boot Detect

Detects Jeecg-Boot Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Jeecg-Boot Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Jeecg-Boot Detect', 'description': 'Detects Jeecg-Boot Detect.',...

ACTi-Video Monitoring - Local File Inclusion Detection

ACTI video surveillance has loopholes in reading any files !/usr/bin/env python3 -- coding: utf-8 -- """ACTI video surveillance has loopholes in reading any files.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Axway SecureTransport Login Panel - Detect

AXWAY SecureTransport login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """AXWAY SecureTransport login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Axway SecureTransport Login...

Wowza Streaming Engine Manager Panel - Detect

Wowza Streaming Engine Manager panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Wowza Streaming Engine Manager panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Wowza Streaming Engin...

RSA Self-Service Login Panel - Detect

RSA Self-Service login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """RSA Self-Service login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'RSA Self-Service Login Panel - Detect...

Lantronix Web Manager Login Panel- Detect

Lantronix Web Manager login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Lantronix Web Manager login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Lantronix Web Manager Login...

Tableau Services Manager Login Panel - Detect

Tableau Services Manager login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Tableau Services Manager login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tableau Services...

Hikvision Springboot Env Actuator - Detect

The HIKVISION comprehensive security management platform has information leakage vulnerabilities, through which attackers can obtain sensitive information such as environment env for further attacks !/usr/bin/env python3 -- coding: utf-8 -- """The HIKVISION comprehensive security management...

Kafka Manager Panel - Unauthorized Access Detection

A kafka manager unauthorized access was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """A kafka manager unauthorized access was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kafka Manager Panel...

FreeIPA Identity Management Login Panel - Detect

FreeIPA Identity Management login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """FreeIPA Identity Management login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'FreeIPA Identit...

Tekton Dashboard Panel - Detect

Tekton Dashboard panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Tekton Dashboard panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tekton Dashboard Panel - Detect', 'description':...

Application Setting file disclosure Detection

appsetting.json file discloses the DB connection strings containing sensitive information. !/usr/bin/env python3 -- coding: utf-8 -- """appsetting.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Application Setting...

Samsung Printer Panel - Detect

Samsung printer panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Samsung printer panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Samsung Printer Panel - Detect', 'description':...

Github Enterprise Login Panel - Detect

Github Enterprise login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Github Enterprise login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Github Enterprise Login Panel -...