Windows Gather Password Vault Credentials

Extract credentials stored in the Windows Credential Manager Password Vault on a Windows shell or Meterpreter session. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.post.windows.session import wincompatfailuretype, winprobepowershell import base64 import re class...

Check PostgreSQL Hardening

Audit common PostgreSQL security misconfigurations from kittysploit import from lib.protocols.postgresql.postgresqlclient import PostgreSQLClient class ModulePost, PostgreSQLClient: info = "name": "Check PostgreSQL Hardening", "description": "Audit common PostgreSQL security misconfigurations",...

Search PostgreSQL Sensitive Data

Find columns likely to hold secrets password, token, apikey, etc. and optionally dump a few sample rows from kittysploit import from lib.protocols.postgresql.postgresqlclient import PostgreSQLClient class ModulePost, PostgreSQLClient: info = "name": "Search PostgreSQL Sensitive Data",...

Enumerate PostgreSQL Extensions

List installed extensions and versions pgcrypto, etc. from kittysploit import from lib.protocols.postgresql.postgresqlclient import PostgreSQLClient class ModulePost, PostgreSQLClient: info = "name": "Enumerate PostgreSQL Extensions", "description": "List installed extensions and versions pgcrypt...

Firebase stack & hosting init — detect

Passive recon: reads the configured path for Firebase SDK / API hints, checks response headers, and optionally GETs /firebase/init.json Firebase Hosting auto-config. Positive when init.json returns a project config or strong in-page markers FIREBASEDEFAULTS, etc.. !/usr/bin/env python3 -- coding:...

HTTP response — credential leak detect

Scans an HTTP response body for exposed credentials: PEM private keys, Google service account JSON, AWS keys. Returns leaked values in output. Use proxyflowid or responsebodyb64 for a captured KittyProxy flow. !/usr/bin/env python3 -- coding: utf-8 -- import base64 import json import re from...

Secret Leak to Access Validator

Detect leaked secret patterns in public artifacts and validate probable access safely. from kittysploit import import json import re from urllib.parse import urlparse from lib.protocols.http.httpclient import Httpclient class ModuleAuxiliary, Httpclient: info = "name": "Secret Leak to Access...

Hop proxy PHP generator

Generates a standalone PHP hop proxy with custom upstream server and Hop-Name value. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import PHPPROXYTEMPLATE = r""" array 'method' = 'GET' , 'ssl'=array "verifypeer"=false, "verifypeername"=false, , ; $headers = array'Hop-Name' = $hopName...

Mail Security Posture

Assess outbound email security posture MX stack, SPF, DMARC, DKIM and classify likely SaaS mail providers Microsoft 365, Google Workspace, SEGs for an organization domain. from kittysploit import import json import re import dns.resolver class ModuleAuxiliary: info = "name": "Mail Security...

SSL TLS Certificate Change Tracker

Track certificate transparency changes and trust-chain anomalies for a domain. from kittysploit import import json from datetime import datetime, timezone from urllib.parse import urlparse from lib.protocols.http.httpclient import Httpclient class ModuleAuxiliary, Httpclient: info = "name": "SSL...

Enumerate MySQL Roles

Enumerate MySQL roles and role assignments to users from kittysploit import from lib.protocols.mysql.mysqlclient import MySQLClient class ModulePost, MySQLClient: info = "name": "Enumerate MySQL Roles", "description": "Enumerate MySQL roles and role assignments to users", "author": "KittySploit...

Check MySQL Hardening

Audit common MySQL security hardening controls and risky configurations from kittysploit import from lib.protocols.mysql.mysqlclient import MySQLClient class ModulePost, MySQLClient: info = "name": "Check MySQL Hardening", "description": "Audit common MySQL security hardening controls and risky...

Azure Blob public listing detect

Checks if Azure Blob container listing is anonymously accessible no exploitation. !/usr/bin/env python3 -- coding: utf-8 -- """Détection listing public Azure Blob container check-only.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

Cloud Misconfig Chains

Correlate AWS misconfigurations into practical compromise chains. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import import json import fnmatch class ModulePost: info = "name": "Cloud Misconfig Chains", "description": "Correlate AWS misconfigurations into practical compromise...

Linux Package Vulnerability Hint

Collect installed package versions and highlight potentially outdated security-sensitive software from kittysploit import from lib.post.linux.system import System from lib.post.linux.session import LinuxSessionMixin class ModulePost, System, LinuxSessionMixin: info = "name": "Linux Package...

Firmware .bin signature scan and decompress

Detects common firmware signatures gzip, lzma, xz, squashfs, ELF, etc. on a local file and recursively decompresses supported compressed formats. !/usr/bin/env python3 -- coding: utf-8 -- import os from kittysploit import from lib.analysis.binary.firmwareextractor import PyFirmwareExtractor class...

Exposed .env file detection

Detects publicly accessible .env files containing application secrets or environment configuration. !/usr/bin/env python3 -- coding: utf-8 -- """Détection fichiers .env exposés.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient PATHS = "/.env", "/.env.local",...

Exposed Git repository detection

Detects publicly accessible Git metadata such as /.git/HEAD or /.git/config. !/usr/bin/env python3 -- coding: utf-8 -- """Detect publicly accessible Git metadata /.git/HEAD, config, index, ….""" from kittysploit import from lib.protocols.http.httpclient import Httpclient PROBEPATHS = "/.git/HEAD"...

Invoke-ReflectivePEInjection

Reflectively loads a Windows PE file DLL/EXE into the PowerShell process, or injects a DLL into a remote process. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import import base64 import os class ModulePost: info = "name": "Invoke-ReflectivePEInjection", "description": "Reflectively...

Invoke-WmiCommand

Executes a PowerShell ScriptBlock on a target computer using WMI as a pure C2 channel. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import import base64 import os class ModulePost: info = "name": "Invoke-WmiCommand", "description": "Executes a PowerShell ScriptBlock on a target...