Cascade CMS Panel - Detect

Cascade CMS was detected — a web content management system for managing stand-out websites. !/usr/bin/env python3 -- coding: utf-8 -- """Cascade CMS was detected — a web content management system for managing stand-out websites.""" from kittysploit import from lib.protocols.http.httpclient import...

ConnectWise Control Remote Support Software Panel - Detect

Detects ConnectWise Control Remote Support Software Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects ConnectWise Control Remote Support Software Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: inf...

Unleash Panel - Detect

Open-source feature management solution built for developers. !/usr/bin/env python3 -- coding: utf-8 -- """Open-source feature management solution built for developers.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

AdminBro Dashboard - Unauthenticated Access Detection

Detected AdminBro/AdminJS admin panel was exposed without authentication, allowing unauthenticated users to access the admin dashboard and potentially view, modify, or delete sensitive data. This misconfiguration occurred when developers used buildRouter instead of buildAuthenticatedRouter...

CasaOS < 0.4.4 - Authentication Bypass via Internal IP Detection

CasaOS is an open-source Personal Cloud system. Due to a lack of IP address verification an unauthenticated attackers can execute arbitrary commands as root on CasaOS instances. The problem was addressed by improving the detection of client IP addresses in 391dd7f. This patch is part of CasaOS...

VMware vRealize Detection

Version of VMware vRealize Operations Manager !/usr/bin/env python3 -- coding: utf-8 -- """Version of VMware vRealize Operations Manager.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'VMware vRealize Detection',...

CATALOGcreator Page Login Panel - Detect

CATALOGcreator Page login panel detected. !/usr/bin/env python3 -- coding: utf-8 -- """CATALOGcreator Page login panel detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'CATALOGcreator Page Login Panel -...

Titan FTP Service - Detect

Titan FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Titan FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'Titan FTP Service - Detect',...

Kubernetes API Server - YAML Parsing DoS (Billion Laughs) Detection

The Kubernetes API server is vulnerable to a denial of service attack via YAML/JSON parsing. An attacker can send a specially crafted YAML/JSON payload that causes exponential memory consumption Billion Laughs attack, leading to API server crash. !/usr/bin/env python3 -- coding: utf-8 -- """The...

Tiki Wiki CMS Groupware 5.2 - Local File Inclusion Detection

Tiki Wiki CMS Groupware 5.2 is susceptible to a local file inclusion vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """Tiki Wiki CMS Groupware 5.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tiki Wiki CM...

WordPress Javo Spot Premium Theme - Local File Inclusion Detection

WordPress Javo Spot Premium Theme is vulnerable to local file inclusion that allows remote unauthenticated attackers access to locally stored file and return their content. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Javo Spot Premium Theme is vulnerable to local file inclusion that...

Apache Kafka Connect UI Login Panel - Detect

Apache Kafka Connect UI login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Kafka Connect UI login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Kafka Connect UI...

CommuniGate Pro FTP Service - Detect

CommuniGate Pro FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """CommuniGate Pro FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name':...

Traefik - Open Redirect Detection

Traefik before 1.7.26, 2.2.8, and 2.3.0-rc3 contains an open redirect vulnerability in the X-Forwarded-Prefix header. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding...

Tableau Python Server Panel - Detect

Tableau Python Server panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Tableau Python Server panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tableau Python Server Panel - Detect',...

GetSimple CMS - Installer Detection

GetSimple CMS installer was found. !/usr/bin/env python3 -- coding: utf-8 -- """GetSimple CMS installer was found.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GetSimple CMS - Installer Detection', 'description':...

Dialogic XMS Admin Console - Detect

Detects Dialogic XMS Admin Console - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Dialogic XMS Admin Console - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dialogic XMS Admin Console -...

Web Suite Detect

Detects Web Suite Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Web Suite Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Web Suite Detect', 'description': 'Detects Web Suite Detect.', 'author'...

Python Virtual Environment Directory Exposure Detection

An exposed Python virtual environment directory allows public access to internal files like pyvenv.cfg, installed packages, and configurations. This can leak sensitive information and aid attackers in identifying or exploiting vulnerabilities. !/usr/bin/env python3 -- coding: utf-8 -- """An expos...

JetBrains TeamCity - Guest User Access Enabled Detection

TeamCity provides the ability to turn on the guest login allowing anonymous access to the TeamCity UI. !/usr/bin/env python3 -- coding: utf-8 -- """TeamCity provides the ability to turn on the guest login allowing anonymous access to the TeamCity UI.""" from kittysploit import from...

Epson Projector Login Panel - Detect

Epson Projector login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Epson Projector login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Epson Projector Login Panel - Detect',...

ASUS DSL-AC88U - Authentication Bypass Detection

A vulnerability in the ASUS DSL-AC88U router permits unauthorized individuals to bypass authentication.When adding "/js/..%2f%2f" or "/images/..%2f%2e" to the requested URL, it will be recognized as passing the authentication.This vulnerability is part of a broader authentication bypass issue...

Couchbase Sync Gateway Detection

Detects Couchbase Sync Gateway. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Couchbase Sync Gateway.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Couchbase Sync Gateway Detection', 'description': 'Detects...

Apache JSPWiki - Detect

Detects a Apache JSPWiki web application, leading open source WikiWiki engine, feature-rich and built around standard JEE components Java, servlets, JSP. !/usr/bin/env python3 -- coding: utf-8 -- """Detects a Apache JSPWiki web application, leading open source WikiWiki engine, feature-rich and...

Digi International Router - Login Panel Detection

Digi International cellular routers expose a web management interface used in industrial IoT and remote connectivity applications. !/usr/bin/env python3 -- coding: utf-8 -- """Digi International cellular routers expose a web management interface used in industrial IoT and remote connec.""" from...

IP Webcam Viewer Page - Detect

Searches for exposed webcams by querying the endpoint and the existence of IP Webcam in the body. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for exposed webcams by querying the endpoint and the existence of IP Webcam in the body.""" from kittysploit import from...

Khodrochi CMS - Cross Site Scripting Detection

A cross site scripting vulnerability was found in the Khodrochi.ir CMS an Iranian Car Services Platform. !/usr/bin/env python3 -- coding: utf-8 -- """A cross site scripting vulnerability was found in the Khodrochi.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

AriaNg Debug Console - Exposure Detection

Detects the presence of AriaNg Debug Console exposure !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of AriaNg Debug Console exposure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AriaNg Debug...

PHP IPAM Installation Page - Exposed Detection

PHP IPAM is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """PHP IPAM is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

IIS-7 Default Page Detection

Detects IIS-7 Default Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects IIS-7 Default Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'IIS-7 Default Page Detection', 'description': 'Detects IIS-7 Defaul...

Drone - Configuration Detection

Drone configuration was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Drone configuration was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Drone - Configuration Detection', 'description':...

SuperVPN Login Panel - Detect

SuperVPN login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SuperVPN login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SuperVPN Login Panel - Detect', 'description':...

Zabbix Setup Configuration Authentication Bypass Detection

After the initial setup process, some steps of setup.php file are reachable not only by super-administrators but also by unauthenticated users. A malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend. !/usr/bin/env python3 -- coding: utf-8 -- """After th...

Fastify Swagger-UI - Information Disclosure Detection

fastify-swagger-ui is a Fastify plugin for serving Swagger UI. Prior to 2.1.0, the default configuration of @fastify/swagger-ui without baseDir set will lead to all files in the module's directory being exposed via http routes served by the module. The vulnerability is fixed in v2.1.0. Setting th...

PaperCut NG Panel - Detect

PaperCut is a print management system. Log in to manage your print quotas, see your print history and configure your system. !/usr/bin/env python3 -- coding: utf-8 -- """PaperCut is a print management system.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

EyesOfNetwork Detect

EyesOfNetwork detection !/usr/bin/env python3 -- coding: utf-8 -- """EyesOfNetwork detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'EyesOfNetwork Detect', 'description': 'EyesOfNetwork detection', 'author':...

DiskStation FTP Service - Detect

DiskStation FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """DiskStation FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'DiskStation FTP...

Motive eSIM Secure Connect Panel - Exposure Detection

Detects exposed Motive eSIM Secure Connect EIM panels used for managing eSIM/iSIM provisioning. Public access to these interfaces may allow attackers to view or interact with sensitive operations such as EID management and bulk provisioning, leading to information disclosure or unauthorized contr...

ThinkCMF X2.2.2 - Remote Code Execution Detection

ThinkCMF X2.2.2 and below contain a remote code execution caused by processing crafted packets, letting attackers execute arbitrary code remotely, exploit requires sending malicious packets. !/usr/bin/env python3 -- coding: utf-8 -- """ThinkCMF X2.""" from kittysploit import from...

CodeMeter - WebAdmin Panel Access Detection

CodeMeter WebAdmin panel was accessed. !/usr/bin/env python3 -- coding: utf-8 -- """CodeMeter WebAdmin panel was accessed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'CodeMeter - WebAdmin Panel Access Detection',...

MikroTik FTP server Detect

The File Transfer Protocol FTP is a standard network protocol used to transfer computer files between a client and server on a computer network. !/usr/bin/env python3 -- coding: utf-8 -- """The File Transfer Protocol FTP is a standard network protocol used to transfer computer files between a...

Fastcgi Default Test Page Detection

Detects Fastcgi Default Test Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Fastcgi Default Test Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Fastcgi Default Test Page Detection', 'description':...

H2 Console Web Login Panel - Detect

H2 Console Web login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """H2 Console Web login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'H2 Console Web Login Panel - Detect',...

Nginx Status Page Detection

Detects Nginx Status Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Nginx Status Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Nginx Status Page Detection', 'description': 'Detects Nginx Status...

Monitorr Panel - Detect

Detects Monitorr Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Monitorr Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Monitorr Panel - Detect', 'description': 'Detects Monitor...

Speedtest Panel - Detection

Speedtest panel was discovered !/usr/bin/env python3 -- coding: utf-8 -- """Speedtest panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Speedtest Panel - Detection', 'description': 'Speedtest pane...

Cloud Config File Exposure Detection

Cloud Config file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Cloud Config file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cloud Config File Exposure Detection', 'description': 'Cloud...

Star Micronics Network Utility Panel - Detect

Star Micronics Network Utility panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Star Micronics Network Utility panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Star Micronics Networ...

Oracle EBS SQL Log - Exposure Detection

Detected exposure of the sqlnet.log file in Oracle E-Business Suite EBS, which often contained sensitive information such as database connection details, TNS entries, usernames, and error logs. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposure of the sqlnet.""" from kittysploit impor...

Atlantis Panel - Detect

Atlantis panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Atlantis panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Atlantis Panel - Detect', 'description': 'Atlantis panel was...