Enumerate PostgreSQL Extensions

List installed extensions and versions pgcrypto, etc. from kittysploit import from lib.protocols.postgresql.postgresqlclient import PostgreSQLClient class ModulePost, PostgreSQLClient: info = "name": "Enumerate PostgreSQL Extensions", "description": "List installed extensions and versions pgcrypt...

Search PostgreSQL Sensitive Data

Find columns likely to hold secrets password, token, apikey, etc. and optionally dump a few sample rows from kittysploit import from lib.protocols.postgresql.postgresqlclient import PostgreSQLClient class ModulePost, PostgreSQLClient: info = "name": "Search PostgreSQL Sensitive Data",...

Firebase stack & hosting init — detect

Passive recon: reads the configured path for Firebase SDK / API hints, checks response headers, and optionally GETs /firebase/init.json Firebase Hosting auto-config. Positive when init.json returns a project config or strong in-page markers FIREBASEDEFAULTS, etc.. !/usr/bin/env python3 -- coding:...

HTTP response — credential leak detect

Scans an HTTP response body for exposed credentials: PEM private keys, Google service account JSON, AWS keys. Returns leaked values in output. Use proxyflowid or responsebodyb64 for a captured KittyProxy flow. !/usr/bin/env python3 -- coding: utf-8 -- import base64 import json import re from...

Enumerate MySQL Roles

Enumerate MySQL roles and role assignments to users from kittysploit import from lib.protocols.mysql.mysqlclient import MySQLClient class ModulePost, MySQLClient: info = "name": "Enumerate MySQL Roles", "description": "Enumerate MySQL roles and role assignments to users", "author": "KittySploit...

Secret Leak to Access Validator

Detect leaked secret patterns in public artifacts and validate probable access safely. from kittysploit import import json import re from urllib.parse import urlparse from lib.protocols.http.httpclient import Httpclient class ModuleAuxiliary, Httpclient: info = "name": "Secret Leak to Access...

SSL TLS Certificate Change Tracker

Track certificate transparency changes and trust-chain anomalies for a domain. from kittysploit import import json from datetime import datetime, timezone from urllib.parse import urlparse from lib.protocols.http.httpclient import Httpclient class ModuleAuxiliary, Httpclient: info = "name": "SSL...

Mail Security Posture

Assess outbound email security posture MX stack, SPF, DMARC, DKIM and classify likely SaaS mail providers Microsoft 365, Google Workspace, SEGs for an organization domain. from kittysploit import import json import re import dns.resolver class ModuleAuxiliary: info = "name": "Mail Security...

Invoke-ReflectivePEInjection

Reflectively loads a Windows PE file DLL/EXE into the PowerShell process, or injects a DLL into a remote process. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import import base64 import os class ModulePost: info = "name": "Invoke-ReflectivePEInjection", "description": "Reflectively...

GTP-U/GTP-C UDP detection

Detects GTP-U 2152 or GTP-C 2123 - 3GPP 4G/5G data/control plane. !/usr/bin/env python3 -- coding: utf-8 -- """Détection GTP-U / GTP-C UDP 2152 / 2123 - 3GPP 4G/5G user/control plane.""" import socket from kittysploit import from core.framework.option import OptPort from...

Sensitive files detection

Detects exposed sensitive files .env, .git, backups, config, etc.. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.protocols.http.httpclient import Httpclient Paths to probe; path, validator. Validator: None = any 200, or callableresponse - bool SENSITIVEPATHS = ".env",...

robots.txt / sitemap detection

Detects exposed robots.txt and sitemap references; reports interesting paths. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'robots.txt / sitemap detection', 'description':...

AD shadow credentials

Detects accounts with msDS-KeyCredentialLink set PKINIT takeover possible. !/usr/bin/env python3 -- coding: utf-8 -- """Detect shadow credentials msDS-KeyCredentialLink on accounts.""" from kittysploit import from lib.protocols.ldap.adclient import Adclient class ModuleScanner, Adclient: info =...

Web POST Listener

Web POST Listener payload in POST body from kittysploit import from lib.protocols.http.httpclient import Httpclient from base64 import b64encode class ModuleListener, Httpclient: info = 'name': 'Web POST Listener', 'description': 'Web POST Listener payload in POST body', 'author': 'KittySploit...

MySQL Database Connection

Connect to MySQL database and execute SQL queries from kittysploit import class ModulePost: info = "name": "MySQL Database Connection", "description": "Connect to MySQL database and execute SQL queries", "author": "KittySploit Team", "sessiontype": SessionType.PHP, "arch": Arch.PHP, 'agent':...

Linux User Enumeration

Enumerate users, groups, login history, sudo permissions, SSH keys, and shell history from kittysploit import from lib.post.linux.system import System from lib.post.linux.session import LinuxSessionMixin class ModulePost, System, LinuxSessionMixin: info = "name": "Linux User Enumeration",...

Linux Execute Command

Execute commands on Linux sessions with support for short/long responses and fire-and-forget mode !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.post.linux.system import System from lib.post.linux.session import LinuxSessionMixin import time import threading class...

Linux Gather Configurations

Linux Gather Configurations with enumeration of configuration files from kittysploit import from lib.post.linux.system import System from lib.post.linux.session import LinuxSessionMixin class ModulePost, System, LinuxSessionMixin: info = "name": "Linux Gather Configurations", "description": "Linu...

Browser In The Browser

Create a fake browser interface inside the real browser to capture user interactions URLs, clicks, keystrokes from kittysploit import import uuid import time import json class ModuleBrowserAuxiliary: info = "name": "Browser In The Browser", "description": "Create a fake browser interface inside t...

Fake CAPTCHA Permissions

Generate a fake CAPTCHA modal that hides permission requests geolocation, camera photo capture, clipboard from kittysploit import class ModuleBrowserAuxiliary: info = "name": "Fake CAPTCHA Permissions", "description": "Generate a fake CAPTCHA modal that hides permission requests geolocation, came...