OpenVPN Server Router Management Panel - Detect

OpenVPN Server Router Management Panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """OpenVPN Server Router Management Panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OpenVPN Server...

Open Web Analytics Login - Detect

Detects the presence of Open Web Analytics login page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of Open Web Analytics login page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Open Web...

Oqtane CMS Database - Detect

Detect which database distribution the target oqtane cms use. !/usr/bin/env python3 -- coding: utf-8 -- """Detect which database distribution the target oqtane cms use.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Oracle Commerce Business Control Center Login Panel - Detect

Oracle Commerce Business Control Center login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Oracle Commerce Business Control Center login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Oracle Enterprise Manager Login Panel - Detect

Oracle Enterprise Manager login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Oracle Enterprise Manager login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Oracle Enterprise...

Oracle Application Server test-cgi Page Detection

Detects Oracle Application Server test-cgi Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Oracle Application Server test-cgi Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Oracle Application Server...

OVPN Configuration Download Page - Detect

OVPS configuration download page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """OVPS configuration download page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OVPN Configuration Download...

Oxid EShop Installer Exposure Detection

Oxid EShop is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Oxid EShop is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

NPM package.json Disclosure Detection

All NodeJS packages contain a file, usually in the project root, called package.json - this file holds various metadata relevant to the project generated by package managers such as npm, yarn, pnpm. !/usr/bin/env python3 -- coding: utf-8 -- """All NodeJS packages contain a file, usually in the...

GXD5 Pacs Connexion Login Panel - Detect

GXD5 Pacs Connexion panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """GXD5 Pacs Connexion panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GXD5 Pacs Connexion Login Panel - Detect',...

PAHTool Login Panel - Detect

PAHTool login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """PAHTool login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PAHTool Login Panel - Detect', 'description': 'PAHTool...

Panabit Login Panel - Detect

Panabit login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Panabit login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Panabit Login Panel - Detect', 'description': 'Panabit...

Parallels H-Sphere - Cross-Site Scripting Detection

Parallels H-Sphere contains multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow...

pfSense Login Panel - Detect

pfSense login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """pfSense login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'pfSense Login Panel - Detect', 'description': 'pfSense...

Phabricator Login Panel - Detect

Phabricator login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Phabricator login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Phabricator Login Panel - Detect', 'description...

PHP IPAM Installation Page - Exposed Detection

PHP IPAM is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """PHP IPAM is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

PhpPgAdmin Version Information - Detect

PhpPgAdmin version information was detected via the intro.php file. !/usr/bin/env python3 -- coding: utf-8 -- """PhpPgAdmin version information was detected via the intro.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: in...

Php.ini File Disclosure Detection

php.ini file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """php.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Php.ini File Disclosure Detection', 'description': 'php.ini file is exposed.', 'author':...

Pinata API Key - Expose Detection

Detects Pinata API Key - Expose. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Pinata API Key - Expose.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pinata API Key - Expose Detection', 'description': 'Detec...

Piwigo Login Panel - Detect

Piwigo login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Piwigo login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Piwigo Login Panel - Detect', 'description': 'Piwigo logi...

Piwik Installer Exposure Detection

Piwik is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Piwik is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

PMB 5.6 - Local File Inclusion Detection

PMB 5.6 is vulnerable to local file inclusion because the PMB Gif Image is not sanitizing the content of the 'chemin' parameter. !/usr/bin/env python3 -- coding: utf-8 -- """PMB 5.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

PNPM Lock Yaml File Disclosure Detection

The pnpm-lock.yaml file is similar to the package-lock.json file used by npm or the yarn.lock file used by Yarn. It serves as a lock file that ensures consistent and reproducible installations of dependencies across different environments. !/usr/bin/env python3 -- coding: utf-8 -- """The...

Polarion Siemens Login - Panel Detection

Detects the exposed Polarion Siemens login page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the exposed Polarion Siemens login page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Polarion Siemens Login -...

Poste.io Admin Panel - Detect

Poste.io login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Poste.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Poste.io Admin Panel - Detect', 'description': 'Poste.io login panel was...

First Poste.io Configuration Installation Wizard Detection

Poste.io is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Poste.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'First Poste.io Configuration...

Postman Collection Exposure Detection

Detected exposed Postman collection JSON files that contained API endpoints and environment details. These files were publicly accessible and disclosed authentication headers and other sensitive information. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed Postman collection JSON fil...

Pritunl - Panel Detection

Realtime website and application monitoring tool !/usr/bin/env python3 -- coding: utf-8 -- """Realtime website and application monitoring tool.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pritunl - Panel...

PrivateBin - Detect

PrivateBin was detected. !/usr/bin/env python3 -- coding: utf-8 -- """PrivateBin was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PrivateBin - Detect', 'description': 'PrivateBin was detected.', 'author'...

Procfile Config - Detect

Procfile configuration information was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Procfile configuration information was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Procfile Config...

Discover production log files Detection

Production log file was exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Production log file was exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Discover production log files Detection', 'description':...

ProFTPD Configuration File - Detect

ProFTPD configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ProFTPD configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ProFTPD Configuration File - Detect',...

ProjectSend Installation Page - Exposure Detection

Detects exposed ProjectSend installation page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed ProjectSend installation page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ProjectSend Installation Page...

Prometheus flags API endpoint Detection

The flags endpoint provides a full path to the configuration file. If the file is stored in the home directory, it may leak a username. !/usr/bin/env python3 -- coding: utf-8 -- """The flags endpoint provides a full path to the configuration file.""" from kittysploit import from...

Proofpoint Protection Server Panel - Detect

Proofpoint Protection Server panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Proofpoint Protection Server panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Proofpoint Protection...

PTC ThingWorx - Panel Detection

PTC ThingWorx is an Industrial IoT IIoT platform for building and deploying connected industrial applications, machine monitoring, and remote service solutions. Exposed instances may provide unauthenticated access to IIoT dashboards and connected device management interfaces. !/usr/bin/env python...

Pulsar360 Admin Panel - Detect

Pulsar360 admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Pulsar360 admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pulsar360 Admin Panel - Detect', 'description':...

Puppet Node Manager Detection

Detects Puppet Node Manager. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Puppet Node Manager.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Puppet Node Manager Detection', 'description': 'Detects Puppet No...

pyproject.toml Configuration - Detect

pyproject.toml configuration was detected. !/usr/bin/env python3 -- coding: utf-8 -- """pyproject.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'pyproject.toml Configuration - Detect', 'description': 'pyproject.tom...

QiHang Media Web (QH.aspx) Digital Signage 3.0.9 - Arbitrary File Disclosure Detection

The QiHang Media Web application suffers from an unauthenticated file disclosure vulnerability when input passed thru the filename parameter when using the download action or thru path parameter when using the getAll action is not properly verified before being used. This can be exploited to...

Quilium Panel - Detect

Quilium CMS Login Panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Quilium CMS Login Panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Quilium Panel - Detect', 'description': 'Quiliu...

Racksnet Login Panel - Detect

Racksnet login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Racksnet login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Racksnet Login Panel - Detect', 'description':...

rack-mini-profiler - Environment Information Disclosure Detection

rack-mini-profiler is prone to environmental information disclosure which could help an attacker formulate additional attacks. !/usr/bin/env python3 -- coding: utf-8 -- """rack-mini-profiler is prone to environmental information disclosure which could help an attacker formulate add.""" from...

RAGFlow Panel - Detect

RAGFlow is an open-source RAG Retrieval-Augmented Generation engine based on deep document understanding. !/usr/bin/env python3 -- coding: utf-8 -- """RAGFlow is an open-source RAG Retrieval-Augmented Generation engine based on deep document understanding.""" from kittysploit import from...

RailsAdmin Dashboard Exposure Detection

Detected RailsAdmin dashboard was exposed without proper authentication, allowing unauthorized access to data management interface. !/usr/bin/env python3 -- coding: utf-8 -- """Detected RailsAdmin dashboard was exposed without proper authentication, allowing unauthorized access to data .""" from...

Ruby on Rails Secret Token Disclosure Detection

Ruby on Rals Secret Token file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Ruby on Rals Secret Token file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ruby on Rails Secret Token Disclosure...

Raritan PDU - Login Panel Detection

Raritan intelligent PDU web interface panel has been detected. !/usr/bin/env python3 -- coding: utf-8 -- """Raritan intelligent PDU web interface panel has been detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name'...

Ray Dashboard Exposure Detection

Ray Dashboard is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Ray Dashboard is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ray Dashboard Exposure Detection', 'description': 'Ray Dashboard is...

React SPA Stack Detection

Identifies standalone React SPAs CRA / Vite / classic and explicitly differentiates them from Next.js so the correct scanner pack can run. !/usr/bin/env python3 -- coding: utf-8 -- """Fingerprint React SPA stacks and distinguish them from Next.js.""" from kittysploit import from...

REDCap detector

Detects REDCap detector. !/usr/bin/env python3 -- coding: utf-8 -- """Detects REDCap detector.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'REDCap detector', 'description': 'Detects REDCap detector.', 'author':...