Misconfiguration Scanners
Misconfigurations account for a large share of real-world breaches. These scanners check for default credentials, open admin interfaces, overly permissive CORS policies, and other avoidable security gaps.
Important Misconfiguration Scanners
Subdomain Takeover Vulnerability Scanner
Online Subdomain Takeover Vulnerability Scanner
Jupyter Lab Unauthenticated Access Scanner
This scanner detects the Unauthenticated Access in Jupyter Lab. Unauthenticated access allows unauthorized individuals to access resources without proper authentication, compromising the security of the system. This can lead to exposure of sensitive information and system manipulation by unauthorized users.
Misconfigured Docker on Default Port
Online Misconfigured Docker on Default Port
ElasticSearch Default Login Scanner
This scanner detects the use of ElasticSearch in digital assets. Identify default login vulnerabilities within ElasticSearch installations to prevent unauthorized access and maintain security.
HTTP Server Cross-Origin Resource Sharing (CORS) Scanner
HTTP Server Cross-Origin Resource Sharing (CORS) Scanner
Docker Daemon Exposure Scanner
This scanner checks if the Docker Daemon REST API is accessible without authentication, allowing attackers to execute arbitrary commands on containers and the host.
Jupyterhub Default Login Scanner
This scanner detects the use of Jupyterhub default login credentials in digital assets. It helps identify configurations using default administrator credentials, enhancing security analysis.
Node-Red Default Credentials Scanner
This scanner checks default credentials on Node-Red
Mysql Empty Password Scanner
If your MySQL server permits connection without a password, it is better to find this before people with malicious intentions.
Live view AXIS Network Camera Scanner
A misconfigured authentication vulnerability is a type of vulnerability that is most commonly found to affect the devices like modems, routers, digital cameras, printers, servers or web-based configuration or administrative interfaces having no password to access all configuration settings.
DVWA Default Login Scanner
Online DVWA Default Login Scanner
MOBOTIX Guest Camera Scanner
A misconfigured authentication vulnerability is a type of vulnerability that is most commonly found to affect the devices like modems, routers, digital cameras, printers, servers or web-based configuration or administrative interfaces having no password to access all configuration settings.
HP LaserJet Printers Scanner
A misconfigured authentication vulnerability is a type of vulnerability that is most commonly found to affect the devices like modems, routers, digital cameras, printers, servers or web-based configuration or administrative interfaces having no password to access all configuration settings.
HG Config Exposure Scanner
This scanner detects the use of HG Config Exposure in digital assets.
Selea Targa IP OCR-ANPR Camera Scanner
A misconfigured authentication vulnerability is a type of vulnerability that is most commonly found to affect the devices like modems, routers, digital cameras, printers, servers or web-based configuration or administrative interfaces having no password to access all configuration settings.
Epson WF Series Printers Detection Scanner
A misconfigured authentication vulnerability is a type of vulnerability that is most commonly found to affect the devices like modems, routers, digital cameras, printers, servers or web-based configuration or administrative interfaces having no password to access all configuration settings.
Misconfigured Redis Scanner
Online Misconfigured Redis Scanner
Springboot Heapdump Actuator Scanner
Environment variables and HTTP requests can be found in the HPROF
JSON Configuration Files Scanner
This scanner detects the use of JSON Configuration Files Exposure in digital assets.
ArgoCD Project API Token Repository Credentials Exposure
Argo CD API tokens with project-level permissions are able to retrieve sensitive repository credentials (usernames, passwords) through the project details API endpoint, even when the token only has standard application management permissions and no explicit access to secrets. This vulnerability affects versions v2.2.0-rc1 and later, including 2.13.0 through 2.13.8, 2.14.0 through 2.14.15, 3.0.0 through 3.0.12, and 3.1.0-rc1 through 3.1.1. Any token with project get permissions is vulnerable, including global permissions. Note: This template requires valid ArgoCD credentials (username/password) to test the vulnerability.
Unauthenticated VNC Server - Detect
The remote host had a VNC server that permitted access without requiring authentication.
CVE-2020-26879 Scanner
CVE-2020-26879 Scanner - Hard-Coded Token vulnerability in Ruckus vRioT IoT Controller
DigitalOcean Key Token Exposure Detection Scanner
This scanner detects the use of DigitalOcean Key Exposure in digital assets. It identifies vulnerabilities associated with the improper handling of sensitive credential keys within the infrastructure.
Apache Hadoop YARN ResourceManager Injection Scanner
This scanner detects the use of Apache Hadoop YARN ResourceManager Remote Code Execution in digital assets. Remote Code Execution allows an attacker to execute arbitrary code on a target system, leading to potential unauthorized access, data manipulation, or system compromise, making this detection crucial for system security.
Nacos 3.x - Unauthenticated Admin Takeover
Nacos 3.0.0 through 3.2.3 contains an authentication scope misassignment vulnerability. The user, role, and permission management API endpoints (UserControllerV3, RoleControllerV3, PermissionControllerV3) have @Secured annotations missing the apiType attribute, defaulting to OPEN_API scope which is guarded by nacos.core.auth.enabled disabled by default.
Panabit Gateway Default Login Scanner
This scanner detects the use of Panabit Gateway in digital assets.
Lutron Default Login Scanner
This scanner detects the use of Lutron default login in digital assets.
Gorse < 0.5.10 - Unauthenticated Database Dump
Gorse
Node-RED - Unauthenticated Access
Node-RED flow editor is accessible without authentication. Node-RED is a flow-based programming tool that can execute arbitrary system commands, read/write files, and make network requests. Unauthenticated access leads to remote code execution.
WordPress AI Engine Plugin - Token Exposure
Unauthenticated sensitive information exposure in AI Engine WordPress plugin
CVE-2024-51978 Scanner
CVE-2024-51978 Scanner - Authentication Bypass vulnerability in Brother Printers
Nginx UI < 2.3.3 - Information Disclosure
Nginx UI
Post SMTP <= 3.6.0 - Email Log Disclosure
Post SMTP WordPress plugin
Juggle <= 1.6.0 - Unauthenticated Exposed H2 Database Console
Juggle ships the H2 database web console enabled and reachable from non-localhost by default. No application-level authentication covers the /h2-console path, and the shipped default datasource credentials (sa/juggle) are known. An unauthenticated remote attacker can reach the console and, using the default credentials, achieve OS command execution on the host via the H2 CREATE ALIAS Runtime.exec() technique.
Dgraph <= 25.3.2 - Admin Token Disclosure
Dgraph
Ruckus Wireless Default Login Scanner
This scanner detects the use of Ruckus Wireless in digital assets.
Mirth Connect - Default Admin Credentials
Detected Mirth Connect was using default credentials admin:admin. Mirth Connect is a widely used healthcare integration engine for HL7, FHIR, and other medical data standards.
Nagios XI Default Login Scanner
This scanner detects the use of Nagios XI default admin login credentials in digital assets.
Allegra - Authentication Bypass via Predictable Password Reset Token
Allegra calculateTokenExpDate Password Recovery Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The specific flaw exists within the password recovery mechanism. The issue results from reliance upon a predictable value when generating a password reset token. An attacker can leverage this vulnerability to bypass authentication on the application.
Homebridge - Unfinished Installation
Homebridge instance with incomplete installation detected. The setup wizard is exposed, allowing anyone to create the first admin account and gain full control over the Homebridge instance. This can lead to unauthorized access to smart home devices and potential network compromise.
Export WP Page to Static HTML <= 4.3.4 - Cookie Exposure
Export WP Page to Static HTML & PDF WordPress plugin
Nginx UI - Broken Access Control
Network attackers can fully control nginx service, including config modification and service restart, leading to complete service takeover.
Argo Workflows - Unauthenticated Dashboard
Argo Workflows dashboard is accessible without authentication. Argo Workflows is a Kubernetes-native workflow engine that can execute arbitrary containers and commands. Unauthenticated access allows viewing, creating, and modifying workflows.
Gogs (Go Git Service) Web Installer Scanner
This scanner detects the use of Gogs (Go Git Service) Web Installer in digital assets.
WordPress Exposed Installation Page Exposure Scanner
This scanner detects the use of WordPress Web Installer in digital assets. WordPress's installation feature can allow unauthorized access if exposed, posing security risks. Detecting these exposures is essential to securing the implementation environment.
nopCommerce Installation Page Exposure Scanner
This scanner detects the presence of nopCommerce Installer's Installation Page in digital assets. The installation page exposure may lead to critical security risks if left unprotected.
AWS Config Exposure Scanner
This scanner detects the use of AWS Credentials Exposure in digital assets.
baserCMS Web Installer Scanner
This scanner detects the use of baserCMS Web Installer in digital assets. It identifies the presence of an incomplete installation which unauthorized users could exploit to set up the CMS with attacker-controlled settings.
CirCarLife Web Installer Scanner
This scanner detects the use of CirCarLife Installation Page Exposure in digital assets. It identifies the publicly accessible setup page of the CirCarLife admin panel which can potentially lead to unauthorized access. Early detection of this misconfiguration helps in securing the system.
osTicket Installer Panel - Detect
osTicket installer panel was detected.
Zenphoto Setup Page Exposure Scanner
This scanner detects the use of Zenphoto Configuration Disclosure in digital assets. Zenphoto setup page before version 1.5 is prone to sensitive information disclosure due to misconfiguration.
GetSimple CMS Web Installer Exposure Scanner
This scanner detects the use of GetSimple CMS Web Installer in digital assets. The web installer allows for new installations of the CMS which may pose security risks if publicly accessible. Identifying the presence of the installer is crucial for maintaining the security of the installation environment.
Fork CMS - Installer
Fork CMS installer page was detected.
mCloud Panel Installer Scanner
Targets the mCloud Panel installation endpoint to detect exposed setup interfaces, enabling attackers to reinstall or modify cloud management configurations.
Langflow AI <= 1.6.9 - CORS Misconfiguration
Langflow AI versions 1.6.9 and earlier are vulnerable to a CORS misconfiguration that allows any origin to make credentialed requests. Combined with SameSite=None cookies, this enables cross-origin token theft and subsequent remote code execution via the /api/v1/validate/code endpoint.
Amazon AWS Metadata Service Misconfiguration Scanner
The AWS host is configured as a proxy which allows access to the metadata service. This could allow significant access to the host/infrastructure.
Alibaba Metadata Service Misconfiguration Checker
The Alibaba host is configured as a proxy which allows access to the metadata service. This could allow significant access to the host/infrastructure.
Run all Misconfiguration checks at once.
S4E covers 2,153+ scanners in this category with continuous monitoring and full remediation guidance.
Start Free Scan →