IAM Backdoor User

Create a persistent IAM user with administrator access !/usr/bin/env python3 -- coding: utf-8 -- """ AWS IAM Backdoor User Module Author: KittySploit Team Version: 1.0.0 This module creates a persistent backdoor IAM user with administrator access. WARNING: This is for authorized penetration testi...

Cross-Account Role Assumption

Attempt to assume IAM roles in other AWS accounts !/usr/bin/env python3 -- coding: utf-8 -- """ AWS Cross-Account Role Assumption Module Author: KittySploit Team Version: 1.0.0 This module attempts to assume roles in other AWS accounts cross-account access. """ from kittysploit import import json...

Enumerate AWS Services

Discover all AWS services in use across the account !/usr/bin/env python3 -- coding: utf-8 -- """ AWS Services Enumeration Module Author: KittySploit Team Version: 1.0.0 This module discovers all AWS services in use and provides a comprehensive overview. """ from kittysploit import import json fr...

Fuzz CANBUS

Fuzzes CAN bus with various message patterns to discover vulnerabilities !/usr/bin/env python3 -- coding: utf-8 -- """ CANBUS Fuzzer - Fuzzes CAN bus with various message patterns Author: KittySploit Team Version: 1.0.0 """ from kittysploit import from core.outputhandler import printinfo,...

Inject CAN Message

Injects CAN messages into the bus attack/exploitation !/usr/bin/env python3 -- coding: utf-8 -- """ CANBUS Message Injector - Injects CAN messages into the bus Author: KittySploit Team Version: 1.0.0 """ from kittysploit import from core.outputhandler import printinfo, printsuccess, printerror,...

Dump CAN Messages

Dumps CAN messages from one CANBUS session or sibling sessions to file !/usr/bin/env python3 -- coding: utf-8 -- """ CANBUS Message Dumper - Dumps CAN messages from a session to file Author: KittySploit Team Version: 1.0.0 """ from kittysploit import from core.outputhandler import printinfo,...

FTP Gather User Information

Enumerates FTP users, checks for anonymous access, and gathers connection information !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.protocols.ftp.ftpclient import FTPClientMixin from ftplib import FTP, errorperm import socket import time class ModulePost,...

D-Link DCS-963L CSRF

D-Link DCS-963L camera - Change admin password via CSRF POST from kittysploit import from lib.protocols.http.csrf import Csrf class ModuleBrowserAuxiliary, Csrf: info = "name": "D-Link DCS-963L CSRF", "description": "D-Link DCS-963L camera - Change admin password via CSRF POST", "author":...

PHP Port Scanner

PHP Port Scanner from kittysploit import class ModulePost: info = "name": "PHP Port Scanner", "description": "PHP Port Scanner", "arch": Arch.PHP, 'agent': 'risk': 'intrusive', 'effects': 'activeexploitation', 'expectedrequests': 2, 'reversible': False, 'approvalrequired': True, 'produces':...

Wordpress Plugin Ad Inserter rce

The ad-inserter plugin before 2.4.22 for WordPress has remote code execution. from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.protocols.http.wordpress import Wordpress class ModuleExploit, Httpclient, Wordpress: info = "name": "Wordpress Plugin Ad Inserter...

flatCore CVE-2019-13961 CSRF

flatCore CMS - CSRF vulnerability in file upload endpoint CVE-2019-13961 from kittysploit import from lib.protocols.http.csrf import Csrf class ModuleBrowserAuxiliary, Csrf: info = "name": "flatCore CVE-2019-13961 CSRF", "description": "flatCore CMS - CSRF vulnerability in file upload endpoint...

Nginx Vulnerability Scanner

Scans for Nginx-specific vulnerabilities, version information, misconfigurations, and exposed sensitive files !/usr/bin/env python3 -- coding: utf-8 -- """ Nginx Vulnerability Scanner Scans for Nginx-specific vulnerabilities, misconfigurations, and security issues """ from kittysploit import from...

atx minicmts creds

LICA miniCMTS E8Ku/i/... devices allow remote attackers to obtain sensitive information via a direct POST request for the inc/user.ini file, leading to discovery of a password hash. from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleAuxiliary, Httpclient: inf...

Wordpress user enumeration

Try to extract wordpress user enumeration from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleAuxiliary, Httpclient: info = 'name': 'Wordpress user enumeration', 'description': "Try to extract wordpress user enumeration", 'tags': 'web', 'scanner', 'wordpress',...

Python Meterpreter, Reverse TCP

Meterpreter-like payload that connects back via TCP requires Python on target !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import import json import base64 import struct class ModulePayload: CLIENTLANGUAGE = "python" info = 'name': 'Python Meterpreter, Reverse TCP', 'description':...

JavaScript CharCode Encoder

Encodes JavaScript using String.fromCharCode with numeric ASCII values from kittysploit import class ModuleEncoder: info = "name": "JavaScript CharCode Encoder", "description": "Encodes JavaScript using String.fromCharCode with numeric ASCII values", "author": "KittySploit Team", "platform":...

Artica Proxy 4.3.0 - Auth Bypass/OS Command Injection

Artica Web Proxy 4.30.000000 allows an authenticated remote attacker to inject commands via the service-cmds parameter in cyrus.php. These commands are executed with root privileges via servicecmdspeform !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from...

Check robots.txt

Crawl a web site and store information about what was found from kittysploit import from lib.protocols.http.httpclient import Httpclient from colorama import Fore, Style class ModuleAuxiliary, Httpclient: info = 'name': 'Check robots.txt', 'description': 'Crawl a web site and store information...

Webmin password_change.cgi Backdoor

An issue was discovered in Webmin =1.920. The parameter old in passwordchange.cgi contains a command injection vulnerability. from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleExploit, Httpclient: info = 'name': "Webmin passwordchange.cgi Backdoor",...

LFI Fuzzer

Fuzzing module for Local File Inclusion vulnerabilities. Tests various LFI bypass techniques and payloads. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.scanner.http.moduleresult import finalizehttpscannerrun, targetbaseurl from lib.protocols.http.httpclient import...

kramer_VIAware RCE

KRAMER VIAware through August 2021 allows remote attackers to execute arbitrarycode because ajaxPages/writeBrowseFilePathAjax.php accepts arbitrary executable pathnames from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleExploit, Httpclient: info = 'name':...

Check archive website

Query the Wayback Machine CDX API for historical URLs of the target host. By default only samples a small set of URLs does not hammer the live site. from kittysploit import from lib.protocols.http.httpclient import Httpclient import requests from urllib.parse import urlparse class ModuleAuxiliary...

Wordpress Plugin Ajax Multi Upload 1.1 - Shell Upload

WordPress Plugin Ajax Multi Upload is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker can exploit this vulnerability to upload arbitrary PHP code and run it in the context o...