Fronius Inverter - Login Panel Detection

Fronius Inverter is the web interface for Fronius GEN24 and Symo series solar inverters, providing real-time monitoring, configuration, and energy management for photovoltaic systems. !/usr/bin/env python3 -- coding: utf-8 -- """Fronius Inverter is the web interface for Fronius GEN24 and Symo...

Froxlor Server Management Backup File - Detect

Froxlor Server Management backup file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Froxlor Server Management backup file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Froxlor Server...

Ganglia Cluster Dashboard - Detect

Ganglia Cluster dashboard was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ganglia Cluster dashboard was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ganglia Cluster Dashboard - Detect',...

Google Cloud Ignore File Exposure Detection

Detected exposed .gcloudignore files which may reveal directory structure,deployment configurations, and sensitive project information used by Google Cloud SDK gcloud during deployments. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed .""" from kittysploit import from...

Google Cloud Credentials Detection

Google Cloud Crdentials file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Google Cloud Crdentials file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Google Cloud Credentials Detection',...

Gerrit Code Review - Account Enumeration Detection

Gerrit Code Review exposes the /accounts/ REST API endpoint which can be used to enumerate user accounts.The endpoint allows querying for accounts by username, email, or name, potentially revealing sensitive user information including account IDs, names, emails, and usernames without...

GetSimple CMS Detection

Template to detect a running GetSimple CMS instance !/usr/bin/env python3 -- coding: utf-8 -- """Template to detect a running GetSimple CMS instance.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GetSimple CMS...

GitHub Debug Page Detection

Detects GitHub Debug Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects GitHub Debug Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GitHub Debug Page Detection', 'description': 'Detects GitHub Debug...

GitLab public signup Detection

Detects GitLab public signup. !/usr/bin/env python3 -- coding: utf-8 -- """Detects GitLab public signup.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GitLab public signup Detection', 'description': 'Detects GitLab...

GitList Disclosure Detection

GitList is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """GitList is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GitList Disclosure Detection', 'description': 'GitList is exposed.', 'author':...

Git Credentials - Detect

Git credentials were detected. !/usr/bin/env python3 -- coding: utf-8 -- """Git credentials were detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Git Credentials - Detect', 'description': 'Git credentials we...

Glimpse Diagnostics - Sensitive Data Exposure Detection

Detected Glimpse diagnostics endpoint. Glimpse is a .NET diagnostics tool that reveals detailed request information, server configuration, SQL queries, connection strings, and session data. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Glimpse diagnostics endpoint.""" from kittysploit...

GNU Mailman Panel - Detect

GNU Mailman panel was detected. Panel exposes all public mailing lists on server. !/usr/bin/env python3 -- coding: utf-8 -- """GNU Mailman panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GNU Mailm...

Gnuboard CMS - Cross-Site Scripting Detection

Gnuboard CMS contains a cross-site scripting vulnerability which allows remote attackers to inject arbitrary JavaScript into the responses returned by the server. !/usr/bin/env python3 -- coding: utf-8 -- """Gnuboard CMS contains a cross-site scripting vulnerability which allows remote attackers ...

Google FLoC Disabled Detection

The detected website has decided to explicitly exclude itself from Google FLoC tracking. !/usr/bin/env python3 -- coding: utf-8 -- """The detected website has decided to explicitly exclude itself from Google FLoC tracking.""" from kittysploit import from lib.protocols.http.httpclient import...

Gradio - Open Redirect Detection

An open redirect vulnerability in Gradio allows attackers to craft malicious URLs that redirect users to external, potentially harmful sites without proper validation. !/usr/bin/env python3 -- coding: utf-8 -- """An open redirect vulnerability in Gradio allows attackers to craft malicious URLs th...

Gradle Enterprise Build Cache Node Login Panel - Detect

Gradle Enterprise Build Cache Node login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Gradle Enterprise Build Cache Node login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Grafana Unauthenticated Access Detection

Detects Grafana instances configured with anonymous access enabled, allowing unauthenticated users to access dashboards, data sources, organization info, and potentially sensitive monitoring data without any credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Grafana instances...

Graphql apiforwp Detect

Detects Graphql apiforwp Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Graphql apiforwp Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Graphql apiforwp Detect', 'description': 'Detects Graphql...

Graylog REST API Endpoints - Exposure Detection

Graylog is a centralized log management solution. According to the official documentation, it exposes multiple endpoints some by default. !/usr/bin/env python3 -- coding: utf-8 -- """Graylog is a centralized log management solution.""" from kittysploit import from lib.protocols.http.httpclient...

Hangfire Dashboard Panel - Detect

Hangfire Dashboard panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Hangfire Dashboard panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Hangfire Dashboard Panel - Detect',...

HashiCorp Boundary Detect

Detects HashiCorp Boundary !/usr/bin/env python3 -- coding: utf-8 -- """Detects HashiCorp Boundary.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HashiCorp Boundary Detect', 'description': 'Detects HashiCorp...

HashiCorp Vault Detect

Detects HashiCorp Vault !/usr/bin/env python3 -- coding: utf-8 -- """Detects HashiCorp Vault.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HashiCorp Vault Detect', 'description': 'Detects HashiCorp Vault', 'author...

HCM Cloud - Arbitrary File Read Detection

HCM-Cloud professional human resources platform in the cloud download Arbitrary file read vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """HCM-Cloud professional human resources platform in the cloud download Arbitrary file read vulnerability.""" import re from kittysploit import from...

Headscale - Login Panel Detection

Headscale is an open-source, self-hosted implementation of the Tailscale control server. It manages WireGuard-based mesh VPN networks and exposes a web UI for administration. !/usr/bin/env python3 -- coding: utf-8 -- """Headscale is an open-source, self-hosted implementation of the Tailscale...

Healthchecks UI Exposure Detection

Healthchecks UI is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Healthchecks UI is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Healthchecks UI Exposure Detection', 'description': 'Healthchecks U...

Hikvision Springboot Env Actuator - Detect

The HIKVISION comprehensive security management platform has information leakage vulnerabilities, through which attackers can obtain sensitive information such as environment env for further attacks !/usr/bin/env python3 -- coding: utf-8 -- """The HIKVISION comprehensive security management...

Homebridge - Unfinished Installation Detection

Homebridge instance with incomplete installation detected. The setup wizard is exposed, allowing anyone to create the first admin account and gain full control over the Homebridge instance. This can lead to unauthorized access to smart home devices and potential network compromise. !/usr/bin/env...

Homer Panel - Detect

A simple static homepage was discovered !/usr/bin/env python3 -- coding: utf-8 -- """A simple static homepage was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Homer Panel - Detect', 'description': 'A...

HomeWorks Illumination Web Keypad Detection

HomeWorks Illumination Web Keypad panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """HomeWorks Illumination Web Keypad panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HomeWorks...

HPE AutoPass License Server - Panel Detection

Detected an exposed HPE AutoPass License Server web interface on the default HTTPS port 5814 by probing the /autopass endpoint. !/usr/bin/env python3 -- coding: utf-8 -- """Detected an exposed HPE AutoPass License Server web interface on the default HTTPS port 5814 by probing the .""" from...

HPE OfficeConnect Switch - Panel Detect

The HPE OfficeConnect Switch was a network switch series built for small and medium businesses.It provided reliable connectivity, simple management, and PoE options to support growing networks. !/usr/bin/env python3 -- coding: utf-8 -- """The HPE OfficeConnect Switch was a network switch series...

Hewlett Packard Integrated Lights Out 5 Login Panel - Detect

Hewlett Packard Integrated Lights Out 5 login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Hewlett Packard Integrated Lights Out 5 login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

HTaccess config file Detection

Detects HTaccess config file. !/usr/bin/env python3 -- coding: utf-8 -- """Detects HTaccess config file.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HTaccess config file Detection', 'description': 'Detects HTacce...

Apache httpd Config File - Detect

Apache httpd configuration information was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Apache httpd configuration information was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache httpd Conf...

Huawei HG532e Router Panel - Detect

Huawei HG532e router login panel was detected. After installation, both the default username and default password are user. !/usr/bin/env python3 -- coding: utf-8 -- """Huawei HG532e router login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Hubble - Detect

Hubble products was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Hubble products was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Hubble - Detect', 'description': 'Hubble products was detected....

Icecast Streaming Media Server Information Panel - Detect

Icecast Streaming Media Server information panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Icecast Streaming Media Server information panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name'...

ICE HRM Login - Detect

The ICE HRM login panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """The ICE HRM login panel was discovered.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ICE HRM Login - Detect',...

iClock Automatic Data Master Server Admin Panel - Detect

An iClock Automatic Data Master Server Admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An iClock Automatic Data Master Server Admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclien...

ICTBroadcast Login Panel - Detect

ICTBroadcast login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ICTBroadcast login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ICTBroadcast Login Panel - Detect',...

ICTBroadcast Installation Wizard Detection

ICTBroadcast is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """ICTBroadcast is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclien...

Public .idea Folder containing http logs Detection

Searches for .idea Folder for http-requests-log.http and http-client.cookies file !/usr/bin/env python3 -- coding: utf-8 -- """Searches for .""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Public .idea...

HP iLO Detection

Version of HP iLO !/usr/bin/env python3 -- coding: utf-8 -- """Version of HP iLO.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HP iLO Detection', 'description': 'Version of HP iLO', 'author': 'KittySploit Team',...

Integrated Management Module - Default Login Detection

Integrated Management Module default login credentials were discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Integrated Management Module default login credentials were discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Indegy Sensor Setup - Installer Detection

Indegy Sensor is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Indegy Sensor is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import...

Inertia.js - Detect

Detected Inertia.js passively using a single plain GET request with no special headers. It matched four server-emitted Inertia-specific signals on the initial document: three proximity-bound body patterns covering the embedded page object formats and one Vary: X-Inertia response header signal set...

Infinispan Console - Detection

Infinispan is an open-source in-memory data grid by Red Hat that exposes a management console under /console/welcome and a REST API under /rest/v2/ on the default port 11222. This template fingerprints Infinispan by matching the unique HTML console markers and the Digest authentication challenge...

MonstraCMS Detection

Detects MonstraCMS Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects MonstraCMS Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MonstraCMS Detection', 'description': 'Detects MonstraCMS...

MongoD Server - Exposure Detection

Detects MongoD Server - Exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects MongoD Server - Exposure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MongoD Server - Exposure Detection', 'description':...