Find Similar Sessions

Find browser sessions with similar fingerprints 90% match from kittysploit import import json from difflib import SequenceMatcher class ModuleBrowserAuxiliary: info = "name": "Find Similar Sessions", "description": "Find browser sessions with similar fingerprints 90% match", "author": "KittySploi...

Play Sound

Play a sound on the browser victim requires user interaction on modern browsers from kittysploit import class ModuleBrowserAuxiliary: info = "name": "Play Sound", "description": "Play a sound on the browser victim requires user interaction on modern browsers", "author": "KittySploit Team",...

Password Harvest

Extract saved passwords from browser autofill by revealing hidden password fields from kittysploit import import json import time class ModuleBrowserAuxiliary: info = "name": "Password Harvest", "description": "Extract saved passwords from browser autofill by revealing hidden password fields",...

FTP Server Enumeration Scanner

Connect to FTP server and enumerate files, directories and server information Direct mode - no session required !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.protocols.ftp.ftpclient import FTPOptions, FTPClientMixin class ModuleAuxiliary, FTPClientMixin: """ FTP Serve...

Android MAC Address

Get the MAC address of an Android device from kittysploit import import re class ModulePost: info = 'name': 'Android MAC Address', 'description': 'Get the MAC address of an Android device', 'author': 'KittySploit Team', 'sessiontype': SessionType.ANDROID, 'agent': 'risk': 'intrusive', 'effects':...

Android Install APK

Install an APK on an Android device from kittysploit import import os class ModulePost: info = 'name': 'Android Install APK', 'description': 'Install an APK on an Android device', 'author': 'KittySploit Team', 'sessiontype': SessionType.ANDROID, 'agent': 'risk': 'intrusive', 'effects':...

Inject CAN Message

Injects CAN messages into the bus attack/exploitation !/usr/bin/env python3 -- coding: utf-8 -- """ CANBUS Message Injector - Injects CAN messages into the bus Author: KittySploit Team Version: 1.0.0 """ from kittysploit import from core.outputhandler import printinfo, printsuccess, printerror,...

Enumerate MySQL Databases

Enumerate all databases, tables, and columns in MySQL from kittysploit import from lib.protocols.mysql.mysqlclient import MySQLClient class ModulePost, MySQLClient: info = "name": "Enumerate MySQL Databases", "description": "Enumerate all databases, tables, and columns in MySQL", "author":...

Web Download File

Download a file from a web server from kittysploit import class ModulePost: info = "name": "Web Download File", "description": "Download a file from a web server", "author": "KittySploit Team", "sessiontype": SessionType.PHP, "arch": Arch.PHP, 'agent': 'risk': 'intrusive', 'effects':...

Web Cookie Listener

Web Cookie Listener from kittysploit import from lib.protocols.http.httpclient import Httpclient from base64 import b64encode class ModuleListener, Httpclient: info = 'name': 'Web Cookie Listener', 'description': 'Web Cookie Listener', 'author': 'KittySploit Team', 'arch': Arch.PHP, 'handler':...

Enumerate AWS Services

Discover all AWS services in use across the account !/usr/bin/env python3 -- coding: utf-8 -- """ AWS Services Enumeration Module Author: KittySploit Team Version: 1.0.0 This module discovers all AWS services in use and provides a comprehensive overview. """ from kittysploit import import json fr...

Download from S3

Download files or entire buckets from S3 !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import import json import os class ModulePost: """Download files or buckets from S3""" info = "name": "Download from S3", "description": "Download files or entire buckets from S3", "author":...

Cross-Account Role Assumption

Attempt to assume IAM roles in other AWS accounts !/usr/bin/env python3 -- coding: utf-8 -- """ AWS Cross-Account Role Assumption Module Author: KittySploit Team Version: 1.0.0 This module attempts to assume roles in other AWS accounts cross-account access. """ from kittysploit import import json...

WordPress Plugin Backdoor

Generate a WordPress plugin backdoor that can be installed in wp-content/plugins/ from kittysploit import import zipfile import os class ModuleBackdoor: info = 'name': 'WordPress Plugin Backdoor', 'description': 'Generate a WordPress plugin backdoor that can be installed in wp-content/plugins/',...

Generic HTTP Client Listener

Ultra-simple HTTP client listener - framework handles session management !/usr/bin/env python3 -- coding: utf-8 -- """ Generic HTTP Client Listener - Ultra-simple implementation following generic pattern Author: KittySploit Team Version: 1.0.0 """ from kittysploit import import requests class...

Check archive website

Query the Wayback Machine CDX API for historical URLs of the target host. By default only samples a small set of URLs does not hammer the live site. from kittysploit import from lib.protocols.http.httpclient import Httpclient import requests from urllib.parse import urlparse class ModuleAuxiliary...

FTP Gather User Information

Enumerates FTP users, checks for anonymous access, and gathers connection information !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.protocols.ftp.ftpclient import FTPClientMixin from ftplib import FTP, errorperm import socket import time class ModulePost,...