BloodHound.py collect

Run bloodhound-python / bloodhound-ce-python against a Domain Controller from Linux or Windows, produce a zip, and merge into the agent attack graph. Default collection=DCOnly LDAP-only, good from Kali. Use All for fuller Session/LocalAdmin fan-out when the network allows. !/usr/bin/env python3 -...

Deploy MQTT Reverse Agent

Generate and optionally execute a stdlib Python MQTT reverse agent from an existing shell session. Pairs with listeners/iot/reversemqttshell. !/usr/bin/env python3 -- coding: utf-8 -- """Post module: package/show MQTT reverse agent for delivery from a shell session.""" from kittysploit import fro...

Windows AS-REP Roast (optional Rubeus)

OPTIONAL fallback: requires Rubeus.exe for live $krb5asrep$ hashes. Prefer native post/ldap/gather/asreproast. !/usr/bin/env python3 -- coding: utf-8 -- """AS-REP roast via Rubeus loadmodule — accounts without Kerberos pre-auth.""" from kittysploit import from lib.post.windows.hashloot import...

SharpHound Collect (optional external)

OPTIONAL: requires SharpHound.exe in data/assemblies/. Prefer native LDAP/GPO modules scanner/ldap/, post/ldap/gather/ for AD mapping. When you need a full CE-style zip: loadmodule SharpHound, pull loot, set bloodhoundexportpath, merge into attackgraph, optional BHCE upload. !/usr/bin/env python3...

DoIP UDS Query

Sends a raw or structured UDS request over DoIP diagnostic messages e.g. 0x22 DID read, 0x10 session control, 0x3E TesterPresent !/usr/bin/env python3 -- coding: utf-8 -- """ DoIP UDS Query - Send arbitrary UDS service requests over an active DoIP session """ from kittysploit import from...

WinRM Spawn Reverse Shell

From the current WinRM session, open a reverse TCP listener lhost:lport and run a PowerShell stager so the target connects back as a shell session. !/usr/bin/env python3 -- coding: utf-8 -- """ Spawn a reverse TCP shell from an existing WinRM session. Starts a local reverse handler, runs a...

Pivot Autoroute

Discover reachable internal subnets from the active session and add framework pivot routes from kittysploit import import ipaddress import re class ModulePost: info = "name": "Pivot Autoroute", "description": "Discover reachable internal subnets from the active session and add framework pivot...

S7 program transfer detect

Actively probes whether Siemens S7 program-transfer jobs appear reachable upload/download channel. Complements passive sniffer detections. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.protocols.ics.constants import ICSPROTOCOLPORTS from...

Windows PSR capture

Records a brief Problem Steps Recorder psr.exe session to a ZIP on the target, then downloads the file through the current session base64 chunks and saves it under ./output. !/usr/bin/env python3 -- coding: utf-8 -- """ PSR psr.exe short recordings on the target; ZIP bytes are pulled through the...

Process Analyzer

Analyze running processes and highlight suspicious execution patterns from kittysploit import import re class ModulePost: info = "name": "Process Analyzer", "description": "Analyze running processes and highlight suspicious execution patterns", "platform": Platform.MULTI, "author": "KittySploit...

Windows PowerShell Exec

Execute a PowerShell command or script on a Windows shell or Meterpreter session and return its output. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.post.windows.session import WindowsSessionMixin class ModulePost, WindowsSessionMixin: info = "name": "Windows...

Spawn Reverse Shell Session

From the current session, open a reverse TCP listener lhost:lport and run a platform-appropriate one-liner so the target connects back; the new socket is registered as a separate shell session. !/usr/bin/env python3 -- coding: utf-8 -- """ Spawn a second interactive shell session reverse TCP from...

Install Python for Windows

Downloads and extracts an embeddable Python3 distribution onto the target !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from core.framework.failure import FailureType, ProcedureError from lib.post.windows.session import wincompatfailuretype, winprobepowershell import os import...

Linux Internal Network Scanner

Scan internal network from compromised Linux machine for pivoting targets from kittysploit import from lib.post.linux.system import System from lib.post.linux.session import LinuxSessionMixin import re class ModulePost, System, LinuxSessionMixin: info = "name": "Linux Internal Network Scanner",...

Android Screenshot

Take a screenshot of an Android device from kittysploit import import os import time from typing import Any, Optional from core.lib.adbsessionutils import getadbdeviceinfo class ModulePost: info = 'name': 'Android Screenshot', 'description': 'Take a screenshot of an Android device', 'author':...

Upload to S3

Upload files or directories to S3 buckets !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import import json import os class ModulePost: info = "name": "Upload to S3", "description": "Upload files or directories to S3 buckets", "author": "KittySploit Team", "tags": "aws", "s3",...