Fuzz CANBUS

Fuzzes CAN bus with various message patterns to discover vulnerabilities !/usr/bin/env python3 -- coding: utf-8 -- """ CANBUS Fuzzer - Fuzzes CAN bus with various message patterns Author: KittySploit Team Version: 1.0.0 """ from kittysploit import from core.outputhandler import printinfo,...

Show PHP config

Show PHP config from kittysploit import class ModulePost: info = "name": "Show PHP config", "description": "Show PHP config", "author": "KittySploit Team", "arch": Arch.PHP, 'agent': 'risk': 'intrusive', 'effects': 'activeexploitation', 'expectedrequests': 2, 'reversible': False,...

List running processes

List running processes from kittysploit import class ModulePost: info = "name": "List running processes", "description": "List running processes", "arch": Arch.PHP, 'agent': 'risk': 'intrusive', 'effects': 'activeexploitation', 'expectedrequests': 2, 'reversible': False, 'approvalrequired': True,...

Generic SSH Client Listener

Ultra-simple SSH client listener - framework handles session management !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import import paramiko class ModuleListener: info = 'name': 'Generic SSH Client Listener', 'description': 'Ultra-simple SSH client listener - framework handles sessio...

Check robots.txt

Crawl a web site and store information about what was found from kittysploit import from lib.protocols.http.httpclient import Httpclient from colorama import Fore, Style class ModuleAuxiliary, Httpclient: info = 'name': 'Check robots.txt', 'description': 'Crawl a web site and store information...

Inject CAN Message

Injects CAN messages into the bus attack/exploitation !/usr/bin/env python3 -- coding: utf-8 -- """ CANBUS Message Injector - Injects CAN messages into the bus Author: KittySploit Team Version: 1.0.0 """ from kittysploit import from core.outputhandler import printinfo, printsuccess, printerror,...

Enumerate MySQL Databases

Enumerate all databases, tables, and columns in MySQL from kittysploit import from lib.protocols.mysql.mysqlclient import MySQLClient class ModulePost, MySQLClient: info = "name": "Enumerate MySQL Databases", "description": "Enumerate all databases, tables, and columns in MySQL", "author":...

Check MySQL User Privileges

Check current MySQL user privileges and capabilities from kittysploit import from lib.protocols.mysql.mysqlclient import MySQLClient class ModulePost, MySQLClient: info = "name": "Check MySQL User Privileges", "description": "Check current MySQL user privileges and capabilities", "author":...

List all users from /etc/passwd

List all users from /etc/passwd from kittysploit import from core.framework.failure import ProcedureError, FailureType class ModulePost: info = "name": "List all users from /etc/passwd", "description": "List all users from /etc/passwd", "author": "KittySploit Team", "arch": Arch.PHP, "tags": "php...

Web Download File

Download a file from a web server from kittysploit import class ModulePost: info = "name": "Web Download File", "description": "Download a file from a web server", "author": "KittySploit Team", "sessiontype": SessionType.PHP, "arch": Arch.PHP, 'agent': 'risk': 'intrusive', 'effects':...

Check Disable Functions

Check Disable Functions from kittysploit import class ModulePost: info = "name": "Check Disable Functions", "description": "Check Disable Functions", "arch": Arch.PHP, 'agent': 'risk': 'intrusive', 'effects': 'activeexploitation', 'expectedrequests': 2, 'reversible': False, 'approvalrequired':...

Collect system information

Collect system information from kittysploit import class ModulePost: info = "name": "Collect system information", "description": "Collect system information", "arch": Arch.PHP, 'agent': 'risk': 'intrusive', 'effects': 'activeexploitation', 'expectedrequests': 2, 'reversible': False,...

Check archive website

Query the Wayback Machine CDX API for historical URLs of the target host. By default only samples a small set of URLs does not hammer the live site. from kittysploit import from lib.protocols.http.httpclient import Httpclient import requests from urllib.parse import urlparse class ModuleAuxiliary...

FTP Listener

FTP client listener - connects to FTP server and creates interactive FTP shell session from kittysploit import from ftplib import FTP class ModuleListener: info = 'name': 'FTP Listener', 'description': 'FTP client listener - connects to FTP server and creates interactive FTP shell session',...

Windows x86 Reverse TCP Stager

Windows x86 Reverse TCP Stager from kittysploit import class ModulePayload: info = 'name': 'Windows x86 Reverse TCP Stager', 'description': 'Windows x86 Reverse TCP Stager', 'author': 'KittySploit Team', 'category': PayloadCategory.STAGER, 'arch': Arch.X64, 'platform': Platform.WINDOWS, 'listener...

Pop-Under Tab Closing

Create a pop-under window on user's tab closing from kittysploit import class ModuleBrowserAuxiliary: info = "name": "Pop-Under Tab Closing", "description": "Create a pop-under window on user's tab closing", "author": "KittySploit Team", "browser": Browser.ALL, "platform": Platform.ALL,...

Enumerate AWS Lambda

Enumerate Lambda functions, configurations, and code !/usr/bin/env python3 -- coding: utf-8 -- """ AWS Lambda Enumeration Module Author: KittySploit Team Version: 1.0.0 This module enumerates AWS Lambda functions, their configurations, and code. """ from kittysploit import import json from...

Enumerate AWS S3

Enumerate S3 buckets, list objects, and check permissions !/usr/bin/env python3 -- coding: utf-8 -- """ AWS S3 Enumeration Module Author: KittySploit Team Version: 1.0.0 This module enumerates S3 buckets and their contents. """ from kittysploit import import json from core.outputhandler import...

Debian Package Creator

Debian Package Creator from kittysploit import import os import shutil from pathlib import Path from lib.compile.debevasionhelpers import createararchive, createcontroltar, createdatatar, class ModuleBackdoor: info = 'name': 'Debian Package Creator', 'description': 'Debian Package Creator',...

Analyze CAN Messages

Analyzes CAN messages from a CANBUS session, detecting patterns and anomalies !/usr/bin/env python3 -- coding: utf-8 -- """ CANBUS Message Analyzer - Analyzes CAN messages from a CANBUS session Author: KittySploit Team Version: 1.0.0 """ from kittysploit import from core.outputhandler import...