InfluxDB Detection

Detects InfluxDB ping and health endpoints. !/usr/bin/env python3 -- coding: utf-8 -- """Detect exposed InfluxDB HTTP API.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "InfluxDB Detection", "description": "Detects...

S7 program transfer detect

Actively probes whether Siemens S7 program-transfer jobs appear reachable upload/download channel. Complements passive sniffer detections. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.protocols.ics.constants import ICSPROTOCOLPORTS from...

Export passive ICS report

Loads a JSON report produced by auxiliary/scanner/ics/passivesniffer and optionally copies it or syncs discovered OT assets to the workspace. !/usr/bin/env python3 -- coding: utf-8 -- import json import os import shutil from kittysploit import from lib.protocols.ics.report import savereport class...

LDAP Add Service Principal Name

Add or remove an SPN on a target account to enable Kerberoast or RBCD prep chains from kittysploit import from lib.protocols.ldap.ldappostclient import LdapPostClient class ModulePost, LdapPostClient: info = "name": "LDAP Add Service Principal Name", "description": "Add or remove an SPN on a targ...

Windows Disable PowerShell Logging

Disable PowerShell Script Block, Module, and Transcription logging. Modes: registry admin GPO keys or sessioncache in-process cachedGroupPolicySettings + PS ETW provider — no admin required. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.c2.stagerevasion import...

Enumerate MSSQL Databases

Enumerate databases, schemas/tables, and columns on Microsoft SQL Server from kittysploit import from lib.protocols.mssql.mssqlclient import MSSQLClient class ModulePost, MSSQLClient: info = "name": "Enumerate MSSQL Databases", "description": "Enumerate databases, schemas/tables, and columns on...

Process Hollowing Evasion

Generate a Windows x64 EXE that hollows a suspended process default: notepad.exe, replaces its memory with decrypted shellcode, and resumes the primary thread. !/usr/bin/env python3 -- coding: utf-8 -- """ Process hollowing evasion loader. Creates a suspended child process, unmaps its original...

Graylog Detection

Detects Graylog system and cluster API endpoints. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Graylog log management API.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.scanner.http.responsevalidation import parsejsonresponse class ModuleScanner,...

RDP Service Detection

Detects RDP service via TPKT/X.224 pre-auth handshake. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Microsoft Remote Desktop RDP service on TCP 3389.""" from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient from lib.scanner.rdp.detectors import proberdp...

History Dump

Collect navigation history signals available to JavaScript Performance API, referrer, history.length from kittysploit import import json class ModuleBrowserAuxiliary: info = "name": "History Dump", "description": "Collect navigation history signals available to JavaScript Performance API, referre...

QUIC Download File

Download a remote file from the implant via an active QUIC C2 session !/usr/bin/env python3 -- coding: utf-8 -- import os from kittysploit import from core.framework.failure import FailureType, ProcedureError from lib.protocols.quic.quicsessionmixin import QuicSessionMixin class ModulePost,...

QUIC Execute Shellcode

Send hex-encoded shellcode to the implant for in-process execution !/usr/bin/env python3 -- coding: utf-8 -- import os import re from kittysploit import from core.framework.failure import FailureType, ProcedureError from lib.protocols.quic.quicsessionmixin import QuicSessionMixin HEXRE =...

LDAP Delegation Audit

Audit unconstrained, constrained, and resource-based constrained delegation from kittysploit import from lib.protocols.ldap.ldappostclient import LdapPostClient from lib.protocols.ldap.adhelpers import UACTRUSTEDFORDELEGATION, UACTRUSTEDTOAUTHFORDELEGATION, class ModulePost, LdapPostClient: info ...

QUIC Upload File

Upload a local file to the remote host via an active QUIC C2 session !/usr/bin/env python3 -- coding: utf-8 -- import os from kittysploit import from core.framework.failure import FailureType, ProcedureError from lib.protocols.quic.quicsessionmixin import QuicSessionMixin class ModulePost,...

HTTPS Mimic Transform

Sends fake TLS 1.2 Client/Server Hello at start, then TLS Application Data. !/usr/bin/env python3 -- coding: utf-8 -- from typing import Optional from kittysploit import TLS record: type 1 + version 2 + length 2 + fragment TLSHEADERLEN = 5 TLSHANDSHAKE = 0x16 TLSAPPLICATIONDATA = 0x17 TLSVERSION1...

XOR Stream Transform

XORs the C2 stream with a repeating key. Symmetric encode/decode. Evades simple signature detection. !/usr/bin/env python3 -- coding: utf-8 -- from typing import Optional from kittysploit import class ModuleTransform: """XOR stream transform - obfuscates C2 traffic with a repeating XOR key."""...

Redis Set Expiration

Set EXPIRE on a key or remove expiration with PERSIST from kittysploit import from lib.protocols.redis.redisclient import RedisClient class ModulePost, RedisClient: info = "name": "Redis Set Expiration", "description": "Set EXPIRE on a key or remove expiration with PERSIST", "author": "KittySploi...

Redis Delete Keys

Delete one or more Redis keys by name or SCAN pattern from kittysploit import from lib.protocols.redis.redisclient import RedisClient class ModulePost, RedisClient: info = "name": "Redis Delete Keys", "description": "Delete one or more Redis keys by name or SCAN pattern", "author": "KittySploit...

Azure VM Run Command Listener

Creates a command session backed by Azure VM Run Command. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import try: from azure.identity import DefaultAzureCredential from azure.mgmt.compute import ComputeManagementClient AZUREAVAILABLE = True except Exception: DefaultAzureCredential ...

Bluetooth LE Scanner

Discover nearby BLE devices using passive/active advertisement scanning. !/usr/bin/env python3 -- coding: utf-8 -- """Discover nearby Bluetooth Low Energy BLE devices.""" from future import annotations import asyncio from typing import Dict from kittysploit import class ModuleAuxiliary: info =...