Web POST Listener

Web POST Listener payload in POST body from kittysploit import from lib.protocols.http.httpclient import Httpclient from base64 import b64encode class ModuleListener, Httpclient: info = 'name': 'Web POST Listener', 'description': 'Web POST Listener payload in POST body', 'author': 'KittySploit...

Web GET Listener

Web GET Listener payload in query parameter from kittysploit import from lib.protocols.http.httpclient import Httpclient from base64 import b64encode class ModuleListener, Httpclient: info = 'name': 'Web GET Listener', 'description': 'Web GET Listener payload in query parameter', 'author':...

Upgrade Shell to Meterpreter (Windows)

Launch a Meterpreter stager from a Windows shell. Auto-detects or installs Python; starts listener automatically. !/usr/bin/env python3 -- coding: utf-8 -- """ Upgrade Shell to Meterpreter Windows. Uses the existing shell session to run a Python Meterpreter stager in background. Starts the...

DNS C2 (Kittysploit DNS)

Uses Kittysploit DNS server API to send commands and receive agent output. Create URLs via API, no local UDP. !/usr/bin/env python3 -- coding: utf-8 -- """ DNS C2 Kittysploit DNS - Uses your Kittysploit DNS server API to send commands and receive agent output. No UDP listener: commands are pushed...

Install Python for Windows

Downloads and extracts an embeddable Python3 distribution onto the target !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from core.framework.failure import FailureType, ProcedureError from lib.post.windows.session import wincompatfailuretype, winprobepowershell import os import...

Fake CAPTCHA Reverse Shell

Generate a fake CAPTCHA modal that tricks users into executing a PowerShell reverse shell via Win+R Copy and Paste attack vector. Serves payload via HTTP server. from kittysploit import from lib.protocols.http.httpserver import Httpserver import json class ModuleBrowserExploit, Httpserver: info =...

MySQL Database Connection

Connect to MySQL database and execute SQL queries from kittysploit import class ModulePost: info = "name": "MySQL Database Connection", "description": "Connect to MySQL database and execute SQL queries", "author": "KittySploit Team", "sessiontype": SessionType.PHP, "arch": Arch.PHP, 'agent':...

Notification Spam

Send multiple push notifications to the browser victim with optional redirect URL or custom JavaScript action on click from kittysploit import import time import json class ModuleBrowserAuxiliary: info = "name": "Notification Spam", "description": "Send multiple push notifications to the browser...

Linux User Enumeration

Enumerate users, groups, login history, sudo permissions, SSH keys, and shell history from kittysploit import from lib.post.linux.system import System from lib.post.linux.session import LinuxSessionMixin class ModulePost, System, LinuxSessionMixin: info = "name": "Linux User Enumeration",...

Linux SOCKS Proxy

Create a SOCKS proxy through a compromised Linux session for network pivoting from kittysploit import from lib.post.linux.system import System from lib.post.linux.session import LinuxSessionMixin import time class ModulePost, System, LinuxSessionMixin: info = "name": "Linux SOCKS Proxy",...

FTP Upload File

Uploads a local file to the FTP server !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.protocols.ftp.ftpclient import FTPClientMixin import os class ModulePost, FTPClientMixin: """FTP File Upload Module""" info = "name": "FTP Upload File", "description": "Uploads a loca...

Fake CAPTCHA Permissions

Generate a fake CAPTCHA modal that hides permission requests geolocation, camera photo capture, clipboard from kittysploit import class ModuleBrowserAuxiliary: info = "name": "Fake CAPTCHA Permissions", "description": "Generate a fake CAPTCHA modal that hides permission requests geolocation, came...

Generate Fingerprint

Generate a unique fingerprint hash from browser properties for session matching from kittysploit import import json import hashlib from datetime import datetime class ModuleBrowserAuxiliary: info = "name": "Generate Fingerprint", "description": "Generate a unique fingerprint hash from browser...

Hidden Form Capture

Create a hidden form to trigger browser autofill and capture saved credentials email/username/password from kittysploit import class ModuleBrowserAuxiliary: info = "name": "Hidden Form Capture", "description": "Create a hidden form to trigger browser autofill and capture saved credentials...

Password Harvest

Extract saved passwords from browser autofill by revealing hidden password fields from kittysploit import import json import time class ModuleBrowserAuxiliary: info = "name": "Password Harvest", "description": "Extract saved passwords from browser autofill by revealing hidden password fields",...

Play Sound

Play a sound on the browser victim requires user interaction on modern browsers from kittysploit import class ModuleBrowserAuxiliary: info = "name": "Play Sound", "description": "Play a sound on the browser victim requires user interaction on modern browsers", "author": "KittySploit Team",...

FTP Delete File

Deletes files or directories from the FTP server !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.protocols.ftp.ftpclient import FTPClientMixin import os class ModulePost, FTPClientMixin: """FTP File Deletion Module""" info = "name": "FTP Delete File", "description":...

XSS Alert

Execute alert on browser victim from kittysploit import class ModuleBrowserAuxiliary: info = "name": "XSS Alert", "description": "Execute alert on browser victim", "author": "KittySploit Team", "tags": "xss", "browser": Browser.ALL, "platform": Platform.ALL, "sessiontype": SessionType.BROWSER,...

Disable DevTools

Disable browser DevTools using multiple protection techniques F12, right-click, keyboard shortcuts, etc. from kittysploit import class ModuleBrowserAuxiliary: info = "name": "Disable DevTools", "description": "Disable browser DevTools using multiple protection techniques F12, right-click, keyboar...

Get Cookies

Get cookies from browser victim from kittysploit import class ModuleBrowserAuxiliary: info = "name": "Get Cookies", "description": "Get cookies from browser victim", "author": "KittySploit Team", "browser": Browser.ALL, "platform": Platform.ALL, "sessiontype": SessionType.BROWSER, def runself:...