OpenSearch Dashboard - Unauth Access Detection

OpenSearch Dashboard is a visualization and management tool for OpenSearch. This template detects instances that are accessible without authentication, potentially exposing sensitive data and system information. !/usr/bin/env python3 -- coding: utf-8 -- """OpenSearch Dashboard is a visualization...

OpenSign Login Panel - Detect

OpenSign Login panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """OpenSign Login panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OpenSign Login Panel - Detect', 'description':...

OpenVPN Admin Login Panel - Detect

OpenVPN Admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """OpenVPN Admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OpenVPN Admin Login Panel - Detect',...

Opentwrt Login / Configuration Interface Detection

Detects Opentwrt Login / Configuration Interface. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Opentwrt Login / Configuration Interface.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Opentwrt Login /...

Open Web Analytics Installer - Exposure Detection

Open Web Analytics is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Open Web Analytics is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient impo...

Oracle Commerce Business Control Center Login Panel - Detect

Oracle Commerce Business Control Center login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Oracle Commerce Business Control Center login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Oracle EBS SQL Log - Exposure Detection

Detected exposure of the sqlnet.log file in Oracle E-Business Suite EBS, which often contained sensitive information such as database connection details, TNS entries, usernames, and error logs. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposure of the sqlnet.""" from kittysploit impor...

Oracle Application Server test-cgi Page Detection

Detects Oracle Application Server test-cgi Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Oracle Application Server test-cgi Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Oracle Application Server...

OrangeHrm Installer Detection

OrangeHrm is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """OrangeHrm is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...

OVPN Configuration Download Page - Detect

OVPS configuration download page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """OVPS configuration download page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OVPN Configuration Download...

GXD5 Pacs Connexion Login Panel - Detect

GXD5 Pacs Connexion panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """GXD5 Pacs Connexion panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GXD5 Pacs Connexion Login Panel - Detect',...

Panabit Login Panel - Detect

Panabit login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Panabit login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Panabit Login Panel - Detect', 'description': 'Panabit...

Pandora FMS Installation Page - Exposure Detection

Detects exposed Pandora FMS installation page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed Pandora FMS installation page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pandora FMS Installation Page...

Parallels H-Sphere - Cross-Site Scripting Detection

Parallels H-Sphere contains multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow...

Peplink Login Panel - Detect

peplink login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """peplink login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Peplink Login Panel - Detect', 'description': 'peplink...

Phabricator Login Panel - Detect

Phabricator login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Phabricator login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Phabricator Login Panel - Detect', 'description...

PhotoPrism Panel - Detect

PhotoPrism is an AI-powered photos app for the decentralized web. This template detects the presence of PhotoPrism login panel. !/usr/bin/env python3 -- coding: utf-8 -- """PhotoPrism is an AI-powered photos app for the decentralized web.""" from kittysploit import from...

PHP_CodeSniffer Configuration Exposure - Detect

PHPCodeSniffer configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """PHPCodeSniffer configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PHPCodeSniffer Configuratio...

phpMemcachedAdmin Panel Detection

phpMemcachedAdmin Panel is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """phpMemcachedAdmin Panel is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'phpMemcachedAdmin Panel Detection', 'description':...

PhpPgAdmin Version Information - Detect

PhpPgAdmin version information was detected via the intro.php file. !/usr/bin/env python3 -- coding: utf-8 -- """PhpPgAdmin version information was detected via the intro.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: in...

PHP End-of-Life - Detect

Detected PHP versions that have reached End-of-Life EOL and no longer receive security updates. !/usr/bin/env python3 -- coding: utf-8 -- """Detected PHP versions that have reached End-of-Life EOL and no longer receive security updates.""" from kittysploit import from lib.protocols.http.httpclien...

Piwigo Login Panel - Detect

Piwigo login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Piwigo login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Piwigo Login Panel - Detect', 'description': 'Piwigo logi...

Piwigo Installation Page - Exposure Detection

Piwigo is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Piwigo is susceptible to the Installation page exposure due to misconfiguration.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Pi-hole Login Panel - Detect

Detects Pi-hole Login Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Pi-hole Login Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pi-hole Login Panel - Detect', 'description':...

Open Journal Systems pkp-lib - Open Redirect Detection

Public Knowledge Project pkp-lib is vulnerable to Open redirect due to a lack of input sanitization in the setLocale function. !/usr/bin/env python3 -- coding: utf-8 -- """Public Knowledge Project pkp-lib is vulnerable to Open redirect due to a lack of input sanitization in the set.""" import re...

Plausible Panel - Detect

Plausible is intuitive, lightweight and open source web analytics. !/usr/bin/env python3 -- coding: utf-8 -- """Plausible is intuitive, lightweight and open source web analytics.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info ...

Plone CMS detect

Detects Plone CMS !/usr/bin/env python3 -- coding: utf-8 -- """Detects Plone CMS.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Plone CMS detect', 'description': 'Detects Plone CMS', 'author': 'KittySploit Team',...

PMB 5.6 - Local File Inclusion Detection

PMB 5.6 is vulnerable to local file inclusion because the PMB Gif Image is not sanitizing the content of the 'chemin' parameter. !/usr/bin/env python3 -- coding: utf-8 -- """PMB 5.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

PMM Installation Wizard Detection

PMM is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """PMM is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Polycom Login Panel - Detect

Polycom login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Polycom login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Polycom Login Panel - Detect', 'description': 'Polycom...

Polyfill.io - Backdoor Detection

The polyfill.io CDN was suspected to serve malware. Note: it's not exploitable anymore !/usr/bin/env python3 -- coding: utf-8 -- """The polyfill.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Polyfill.io ...

Poste.io Admin Panel - Detect

Poste.io login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Poste.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Poste.io Admin Panel - Detect', 'description': 'Poste.io login panel was...

First Poste.io Configuration Installation Wizard Detection

Poste.io is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Poste.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'First Poste.io Configuration...

Postman Collection Exposure Detection

Detected exposed Postman collection JSON files that contained API endpoints and environment details. These files were publicly accessible and disclosed authentication headers and other sensitive information. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed Postman collection JSON fil...

PowerLogic ION Panel - Detect

PowerLogic ION panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """PowerLogic ION panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PowerLogic ION Panel - Detect', 'description':...

PrestaShop Tech Detection

Detects PrestaShop Tech Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects PrestaShop Tech Detection.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PrestaShop Tech Detection', 'description':...

PrivateGPT - Detect

PrivateGPT panel has been detected. !/usr/bin/env python3 -- coding: utf-8 -- """PrivateGPT panel has been detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PrivateGPT - Detect', 'description': 'PrivateGPT...

Procfile Config - Detect

Procfile configuration information was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Procfile configuration information was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Procfile Config...

Discover production log files Detection

Production log file was exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Production log file was exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Discover production log files Detection', 'description':...

ProfitTrailer Setup Page - Exposure Detection

Detects exposed ProfitTrailer Setup page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed ProfitTrailer Setup page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ProfitTrailer Setup Page - Exposure...

ProjectSend Installation Page - Exposure Detection

Detects exposed ProjectSend installation page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed ProjectSend installation page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ProjectSend Installation Page...

Prowlarr Dashboard - Unauthenticated Detection

Exposure of Prowlarr dashboard which can lead to sensitive information disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Exposure of Prowlarr dashboard which can lead to sensitive information disclosure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

PTC ThingWorx - Panel Detection

PTC ThingWorx is an Industrial IoT IIoT platform for building and deploying connected industrial applications, machine monitoring, and remote service solutions. Exposed instances may provide unauthenticated access to IIoT dashboards and connected device management interfaces. !/usr/bin/env python...

Pterodactyl game server - Panel Detection

Detects Pterodactyl game server management panel. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Pterodactyl game server management panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pterodactyl game server...

Puppet Node Manager Detection

Detects Puppet Node Manager. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Puppet Node Manager.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Puppet Node Manager Detection', 'description': 'Detects Puppet No...

Python History File Disclosure Detection

Detected exposed .pythonhistory files on web servers.These files contained Python REPL command history that could have leaked sensitive information such as credentials, API keys, internal paths, database queries, and system commands. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed...

Intelbras DVR - Unrestricted Access Detection

The HTTP GET request to /cap.js on the server Intelbras DVR reveals several potentially sensitive pieces of information that are not properly protected or encrypted. !/usr/bin/env python3 -- coding: utf-8 -- """The HTTP GET request to /cap.""" from kittysploit import from...

IntelliFlash Login Panel - Detect

IntelliFlash login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """IntelliFlash login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'IntelliFlash Login Panel - Detect',...

InfluxDB Version Information - Detect

InfluxDB version information check was conducted. !/usr/bin/env python3 -- coding: utf-8 -- """InfluxDB version information check was conducted.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'InfluxDB Version...

Intel Active Management Technology Server Detection

Detected Intel Active Management Technology AMT web interfaces by identifying the Server header in HTTP responses. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Intel Active Management Technology AMT web interfaces by identifying the Server header in HTTP resp.""" from kittysploit import...