Graphql Java Detect

Detects Graphql Java Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Graphql Java Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Graphql Java Detect', 'description': 'Detects Graphql Java...

SMTP WP Plugin Directory Listing Detection

The WordPress Easy WP SMTP Plugin has its log folder remotely accessible and its content available for access. !/usr/bin/env python3 -- coding: utf-8 -- """The WordPress Easy WP SMTP Plugin has its log folder remotely accessible and its content available for access.""" from kittysploit import fro...

Phoenix Contact CHARX SEC-3XXX AC Controller < 1.7.3 - Multiple Vulnerabilities Detection

Multiple vulnerabilities exist in Phoenix Contact CHARX SEC-3XXX AC Controller versions prior to 1.7.3. Successful exploitation may allow attackers to bypass authentication, disclose sensitive information, or execute arbitrary code. !/usr/bin/env python3 -- coding: utf-8 -- """Multiple...

Haivision Gateway Login Panel - Detect

Haivision Gateway login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Haivision Gateway login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Haivision Gateway Login Panel -...

WordPress Plugin Idx Broker Platinum Listing Detection

Searches for sensitive directories present in the idx-broker-platinum plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for sensitive directories present in the idx-broker-platinum plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Openfire Setup - Exposure Detection

Checks for the presence of a Openfire Setup Page. !/usr/bin/env python3 -- coding: utf-8 -- """Checks for the presence of a Openfire Setup Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Openfire Setup - Exposu...

Oracle GlassFish Server Open Source Edition 4.1 - Local File Inclusion Detection

Oracle GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated local file inclusion vulnerabilities that can be exploited by issuing specially crafted HTTP GET requests. !/usr/bin/env python3 -- coding: utf-8 -- """Oracle GlassFish Server Open Source Editi...

Cisco Unified IP Conference Station 7937G - Denial-of-Service Detection

Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers to restart the device remotely via specially crafted packets that can cause a denial-of-service condition. Note: We cannot prove this vulnerability exists. Out of an abundance of caution, this CVE is being assigned...

Cisco Secure Desktop Installation Panel - Detect

Cisco Secure Desktop installation panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Cisco Secure Desktop installation panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cisco Secure...

Jolokia Configuration - Exposure Detection

Detected exposed Jolokia configuration files jolokia-agent.properties and jolokia-access.xml. Exposure of these files could have revealed sensitive agent configuration, authentication credentials, or access control policies CORS, allowed MBeans. !/usr/bin/env python3 -- coding: utf-8 -- """Detect...

WAVLINK WN535 G3 - Information Disclosure Detection

WAVLINK WN535 G3 M35G3R.V5030.180927 is susceptible to information disclosure in the livemfg.shtml page. An attacker can obtain sensitive router information via the exec cmd function and possibly obtain additional sensitive information, modify data, and/or execute unauthorized operations...

ONLYOFFICE Login Panel - Detect

ONLYOFFICE Community Server is a free open-source collaborative system developed to manage documents, projects, customer relationship and email correspondence. !/usr/bin/env python3 -- coding: utf-8 -- """ONLYOFFICE Community Server is a free open-source collaborative system developed to manage...

Joomla! Component ZiMBCore 0.1 - Local File Inclusion Detection

A directory traversal vulnerability in the ZiMB Core aka ZiMBCore or comzimbcore component 0.1 in the ZiMB Manager collection for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php...

WP Cerber < 8.9.3 - Broken Access Control Detection

WP Cerber 8.9.3 contains a bypass of /wp-json access control caused by improper handling of trailing '?' character, letting unauthorized users access protected REST API endpoints, exploit requires sending a request with a trailing '?'. !/usr/bin/env python3 -- coding: utf-8 -- """WP Cerber 8."""...

iTop - User Enumeration via REST Endpoint Detection

From the webservices/rest.php file, several operations are accessible from an unauthenticated user. One of them is doresetpwd, allowing to reset a user password. This feature can be abused to perform user enumeration when a non-existent user is provided. !/usr/bin/env python3 -- coding: utf-8 --...

Polycom Login Panel - Detect

Polycom login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Polycom login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Polycom Login Panel - Detect', 'description': 'Polycom...

Pega Infinity Login Panel - Detect

Pega Infinity login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Pega Infinity login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pega Infinity Login Panel - Detect',...

NATS Messaging Server Detection

Detects NATS servers by reading the INFO greeting on TCP 4222. !/usr/bin/env python3 -- coding: utf-8 -- """Detect NATS messaging servers via INFO handshake.""" from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient from lib.scanner.nats.detectors import probenats...

AXIS Network Camera Live View - Detect

AXIS Network Camera live view was detected. !/usr/bin/env python3 -- coding: utf-8 -- """AXIS Network Camera live view was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.osint.faviconhash import shodanmmh3 class ModuleScanner, Httpclient: info =...

Exposed JSON Configuration Files Detection

Detects exposed JSON configuration files containing sensitive information including API keys, access tokens, AWS credentials, database configurations, base URLs, file paths, and application settings. These files often contain production configurations and credentials that should not be publicly...

Apache HTTP Server Test Page Detection

Detects default installations of apache not just apache2 or installations on CentOS !/usr/bin/env python3 -- coding: utf-8 -- """Detects default installations of apache not just apache2 or installations on CentOS.""" import re from kittysploit import from lib.protocols.http.httpclient import...

Netsweeper - Authentication Bypass Detection

The Client Filter Admin portal in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and subsequently create arbitrary profiles via a showdeny action to the default URL. !/usr/bin/env python3 -- coding: utf-8 -- """The Client Filt...

PTC ThingWorx - Panel Detection

PTC ThingWorx is an Industrial IoT IIoT platform for building and deploying connected industrial applications, machine monitoring, and remote service solutions. Exposed instances may provide unauthenticated access to IIoT dashboards and connected device management interfaces. !/usr/bin/env python...

KMCIS CaseAware - Cross-Site Scripting Detection

KMCIS CaseAware contains a reflected cross-site scripting vulnerability via the user parameter transmitted in the login.php query string. !/usr/bin/env python3 -- coding: utf-8 -- """KMCIS CaseAware contains a reflected cross-site scripting vulnerability via the user parameter transmitted in ."""...

Java FTP Proxy Service - Detect

Java FTP Proxy service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Java FTP Proxy service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'Java FTP Proxy...

Dialogic XMS Admin Console - Detect

Detects Dialogic XMS Admin Console - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Dialogic XMS Admin Console - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dialogic XMS Admin Console -...

Fortinet FortiTester Login Panel - Detect

Fortinet FortiTester login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Fortinet FortiTester login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Fortinet FortiTester Login...

Kubernetes Pods - API Discovery & Remote Code Execution Detection

A Kubernetes Pods API was discovered. When the service port is available, unauthenticated users can execute commands inside the container. !/usr/bin/env python3 -- coding: utf-8 -- """A Kubernetes Pods API was discovered.""" from kittysploit import from lib.protocols.http.httpclient import...

ProFTPD Configuration File - Detect

ProFTPD configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ProFTPD configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ProFTPD Configuration File - Detect',...

Owncloud StatusPage detection

Detects Owncloud StatusPage detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Owncloud StatusPage detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Owncloud StatusPage detection', 'description'...

Hugo Detect

Hugo is a fast and modern static site generator written in Go !/usr/bin/env python3 -- coding: utf-8 -- """Hugo is a fast and modern static site generator written in Go.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Detect Azure Kubernetes Service

Detects Detect Azure Kubernetes Service. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Detect Azure Kubernetes Service.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect Azure Kubernetes Service',...

OctoPrint Login Panel - Detect

OctoPrint login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """OctoPrint login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OctoPrint Login Panel - Detect', 'description':...

Adobe Coldfusion - Authentication Bypass Detection

Adobe ColdFusion versions 2023.5 and earlier and 2021.11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An unauthenticated attacker could leverage this vulnerability to access the administration CFM and CFC endpoints...

WordPress enhanced-tooltipglossary 3.2.8 - Cross-Site Scripting Detection

WordPress enhanced-tooltipglossary 3.2.8 contains a reflected cross-site scripting vulnerability which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication...

Hoppscotch <= 2026.2.1 - Open Redirect Detection

Hoppscotch = 2026.2.1 is vulnerable to a DOM-based open redirect on the /enter page. The redirect query parameter is passed directly to windowz location.href with no origin validation. Requires one additional query parameter to trigger. Exploited via a crafted URL such as...

Apache Pinot - Detect

Detects a Apache Pinot web application, A realtime distributed OLAP datastore. !/usr/bin/env python3 -- coding: utf-8 -- """Detects a Apache Pinot web application, A realtime distributed OLAP datastore.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Reliable Controls MACH-Pro - Login Panel Detection

Reliable Controls MACH-ProWebSys is a web-based building controller for HVAC, lighting, and energy management using BACnet/IP. These controllers are widely deployed in commercial buildings across North America and are often directly internet-facing with no VPN protection. !/usr/bin/env python3 --...

HyperDX Panel - Detect

HyperDX panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """HyperDX panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HyperDX Panel - Detect', 'description': 'HyperDX panel was...

BioTime Web Login Panel - Detect

BioTime Web login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """BioTime Web login panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'BioTime Web Login Panel - Detect',...

ITMS-Misconfigured Detection

Detection of misconfigured ServiceNow ITSM instances. !/usr/bin/env python3 -- coding: utf-8 -- """Detection of misconfigured ServiceNow ITSM instances.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Ecology OA CheckServer - SQL Injection Detection

Ecology OA system improperly filters incoming data from users, resulting in a SQL injection vulnerability. Remote and unauthenticated attackers can use this vulnerability to conduct SQL injection attacks and steal sensitive database information. !/usr/bin/env python3 -- coding: utf-8 -- """Ecolog...

WordPress Integrator 1.32 - Cross-Site Scripting Detection

A cross-site scripting vulnerability in wp-integrator.php in the WordPress Integrator module 1.32 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirectto parameter to wp-login.php. !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting...

AeroCMS Detect

Detects AeroCMS Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects AeroCMS Detect.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AeroCMS Detect', 'description': 'Detects AeroCMS Detect.',...

HAL Management Console Panel Detection

HAL Management Console login panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """HAL Management Console login panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HAL Management Consol...

Ampache Login Panel - Detect

Ampache login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ampache login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ampache Login Panel - Detect', 'description': 'Ampache...

AChecker Login - Panel Detect

AChecker login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """AChecker login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AChecker Login - Panel Detect', 'description':...

Rustici Content Controller Panel - Detect

Rustici Content Controller panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Rustici Content Controller panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Rustici Content Controller...

JFrog Login Panel - Detect

JFrog login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """JFrog login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'JFrog Login Panel - Detect', 'description': 'JFrog login...

Submitty Login Panel - Detect

Submitty login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Submitty login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Submitty Login Panel - Detect', 'description':...