nginxWebUI ≤ 3.5.0 runCmd - Remote Command Execution Detection

nginxWebUI’s runCmd feature and is caused by incomplete validation of user input. Attackers can exploit the vulnerability by crafting malicious data to execute arbitrary commands on a vulnerable server without authorization. !/usr/bin/env python3 -- coding: utf-8 -- """nginxWebUI’s runCmd feature...

Nginx Server - Local File Inclusion Detection

Nginx server is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Nginx server is vulnerable to local file inclusion.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Nginx...

Nginx Vhost Traffic Status Detection

Nginx Vhost Traffic status is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Nginx Vhost Traffic status is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Nginx Vhost Traffic Status Detection',...

NI Web-based Configuration & Monitoring - Detect

Detects NI Web-based Configuration & Monitoring - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects NI Web-based Configuration & Monitoring - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'NI...

Node ecstatic Directory Listing Detection

Directiory listing enabled in Node ecstatic. !/usr/bin/env python3 -- coding: utf-8 -- """Directiory listing enabled in Node ecstatic.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Node ecstatic Directory Listing...

Nordex Control Wind Farm Portal Login Panel - Detect

Nordex Control Wind Farm Portal login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Nordex Control Wind Farm Portal login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Nordex...

Well-Known Nostr JSON Detection

Detects Nostr public key discovery JSON. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Nostr public key discovery JSON.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Well-Known Nostr JSON Detection',...

NUUO Network Video Recorder Login Panel - Detect

NUUO Network Video Recorder login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """NUUO Network Video Recorder login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'NUUO Network...

NZBGet Login Panel - Detect

NZBGet login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """NZBGet login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'NZBGet Login Panel - Detect', 'description': 'NZBGet logi...

OAuth 2.0 Authorization Server Detection Template

Try to detect OAuth 2.0 Authorization Server via the "oauth/token" endpoint !/usr/bin/env python3 -- coding: utf-8 -- """Try to detect OAuth 2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OAuth 2.0 Authorization...

OctoberCMS detect

Detects OctoberCMS !/usr/bin/env python3 -- coding: utf-8 -- """Detects OctoberCMS.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OctoberCMS detect', 'description': 'Detects OctoberCMS', 'author': 'KittySploit Team...

OctoPrint Login Panel - Detect

OctoPrint login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """OctoPrint login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OctoPrint Login Panel - Detect', 'description':...

Odoo - Unprotected Database Detection

The system has an Odoo application whose database manager is unprotected, indicating potential unauthorized access. !/usr/bin/env python3 -- coding: utf-8 -- """The system has an Odoo application whose database manager is unprotected, indicating potential unauthorized ac.""" from kittysploit impo...

OfficeKeeper Admin Login Panel - Detect

OfficeKeeper admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """OfficeKeeper admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OfficeKeeper Admin Login Panel -...

Open Journal Systems Installer - Exposure Detection

Open Journal Systems is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Open Journal Systems is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient...

Find Pages with Old Copyright Dates Detection

Detects pages that still display a copyright year older than the current year. !/usr/bin/env python3 -- coding: utf-8 -- """Detects pages whose visible copyright year looks outdated.""" import re from datetime import datetime from kittysploit import from lib.protocols.http.httpclient import...

OneBlog Detect

Detects OneBlog Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects OneBlog Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OneBlog Detect', 'description': 'Detects OneBlog Detect.', 'author':...

Onion Website Supported via Onion-Location Header Detection

Identified websites that supported Tor network access through the Onion-Location HTTP response header, which pointed to a corresponding .onion service for enhanced privacy and anonymity. !/usr/bin/env python3 -- coding: utf-8 -- """Identified websites that supported Tor network access through the...

ONLYOFFICE Login Panel - Detect

ONLYOFFICE Community Server is a free open-source collaborative system developed to manage documents, projects, customer relationship and email correspondence. !/usr/bin/env python3 -- coding: utf-8 -- """ONLYOFFICE Community Server is a free open-source collaborative system developed to manage...

Odoo OpenERP Database Selector Panel - Detect

Odoo OpenERP database selector panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Odoo OpenERP database selector panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Odoo OpenERP Database...

Opengear Management Console Login Panel - Detect

The Opengear Management Console admin panel has been discovered. !/usr/bin/env python3 -- coding: utf-8 -- """The Opengear Management Console admin panel has been discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

OpenLLM Panel - Detect

OpenLLM is an open-source platform for running and deploying LLMs in production. It is built by BentoML and provides an OpenAI-compatible API server with a web UI for model management. !/usr/bin/env python3 -- coding: utf-8 -- """OpenLLM is an open-source platform for running and deploying LLMs i...

OpenNebula Login Panel - Detect

OpenNebula login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """OpenNebula login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OpenNebula Login Panel - Detect', 'description':...

OpenReplay RUM - Tech Detect

Detects OpenReplay formerly Asayer Session Replay & RUM SDK implementation. !/usr/bin/env python3 -- coding: utf-8 -- """Detects OpenReplay formerly Asayer Session Replay & RUM SDK implementation.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

OpenSearch Dashboard - Unauth Access Detection

OpenSearch Dashboard is a visualization and management tool for OpenSearch. This template detects instances that are accessible without authentication, potentially exposing sensitive data and system information. !/usr/bin/env python3 -- coding: utf-8 -- """OpenSearch Dashboard is a visualization...

OpenSign Login Panel - Detect

OpenSign Login panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """OpenSign Login panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OpenSign Login Panel - Detect', 'description':...

OpenVPN Admin Login Panel - Detect

OpenVPN Admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """OpenVPN Admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OpenVPN Admin Login Panel - Detect',...

Opentwrt Login / Configuration Interface Detection

Detects Opentwrt Login / Configuration Interface. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Opentwrt Login / Configuration Interface.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Opentwrt Login /...

Open Web Analytics Installer - Exposure Detection

Open Web Analytics is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Open Web Analytics is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient impo...

Oracle Commerce Business Control Center Login Panel - Detect

Oracle Commerce Business Control Center login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Oracle Commerce Business Control Center login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Oracle EBS SQL Log - Exposure Detection

Detected exposure of the sqlnet.log file in Oracle E-Business Suite EBS, which often contained sensitive information such as database connection details, TNS entries, usernames, and error logs. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposure of the sqlnet.""" from kittysploit impor...

Oracle Application Server test-cgi Page Detection

Detects Oracle Application Server test-cgi Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Oracle Application Server test-cgi Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Oracle Application Server...

OrangeHrm Installer Detection

OrangeHrm is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """OrangeHrm is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...

OVPN Configuration Download Page - Detect

OVPS configuration download page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """OVPS configuration download page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OVPN Configuration Download...

GXD5 Pacs Connexion Login Panel - Detect

GXD5 Pacs Connexion panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """GXD5 Pacs Connexion panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GXD5 Pacs Connexion Login Panel - Detect',...

Panabit Login Panel - Detect

Panabit login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Panabit login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Panabit Login Panel - Detect', 'description': 'Panabit...

Pandora FMS Installation Page - Exposure Detection

Detects exposed Pandora FMS installation page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed Pandora FMS installation page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pandora FMS Installation Page...

Parallels H-Sphere - Cross-Site Scripting Detection

Parallels H-Sphere contains multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow...

Peplink Login Panel - Detect

peplink login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """peplink login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Peplink Login Panel - Detect', 'description': 'peplink...

Phabricator Login Panel - Detect

Phabricator login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Phabricator login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Phabricator Login Panel - Detect', 'description...

PhotoPrism Panel - Detect

PhotoPrism is an AI-powered photos app for the decentralized web. This template detects the presence of PhotoPrism login panel. !/usr/bin/env python3 -- coding: utf-8 -- """PhotoPrism is an AI-powered photos app for the decentralized web.""" from kittysploit import from...

PHP_CodeSniffer Configuration Exposure - Detect

PHPCodeSniffer configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """PHPCodeSniffer configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PHPCodeSniffer Configuratio...

phpMemcachedAdmin Panel Detection

phpMemcachedAdmin Panel is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """phpMemcachedAdmin Panel is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'phpMemcachedAdmin Panel Detection', 'description':...

PhpPgAdmin Version Information - Detect

PhpPgAdmin version information was detected via the intro.php file. !/usr/bin/env python3 -- coding: utf-8 -- """PhpPgAdmin version information was detected via the intro.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: in...

PHP End-of-Life - Detect

Detected PHP versions that have reached End-of-Life EOL and no longer receive security updates. !/usr/bin/env python3 -- coding: utf-8 -- """Detected PHP versions that have reached End-of-Life EOL and no longer receive security updates.""" from kittysploit import from lib.protocols.http.httpclien...

Piwigo Login Panel - Detect

Piwigo login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Piwigo login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Piwigo Login Panel - Detect', 'description': 'Piwigo logi...

Piwigo Installation Page - Exposure Detection

Piwigo is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Piwigo is susceptible to the Installation page exposure due to misconfiguration.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Pi-hole Login Panel - Detect

Detects Pi-hole Login Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Pi-hole Login Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pi-hole Login Panel - Detect', 'description':...

Open Journal Systems pkp-lib - Open Redirect Detection

Public Knowledge Project pkp-lib is vulnerable to Open redirect due to a lack of input sanitization in the setLocale function. !/usr/bin/env python3 -- coding: utf-8 -- """Public Knowledge Project pkp-lib is vulnerable to Open redirect due to a lack of input sanitization in the set.""" import re...

Plausible Panel - Detect

Plausible is intuitive, lightweight and open source web analytics. !/usr/bin/env python3 -- coding: utf-8 -- """Plausible is intuitive, lightweight and open source web analytics.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info ...