Security Cipher
Home Blog About Us
Resources ▼
🗺️ Penetration Testing Roadmap 🌐 Web Application Security Checklist 🤖 OWASP Top 10 for LLM Applications 🧠 LLM AI Security Checklist 🛠️ Security Tools 🎯 Penetration Testing Tricks 📄 Secure Code Explain 📖 Vulnerability Explain ☁️ AWS Cloud Security Checklist
My Resume
Contact UsContact
← Security Tools View on GitHub

KittySploit

Python Exploitation Framework, V8 Engine Debugger, Proxy interceptor, marketplace, post-exploitation, backdoor generator,....

KittySploit logo

KittySploit

A modular offensive security framework and C2 platform for pentesters, researchers and red teams.

Scan targets, organize engagements, run security modules, operate C2 listeners and sessions, and build AI-assisted testing plans from a single console.

Python License Discord

Get started · Documentation · Website · Discord

KittySploit offensive security framework

Why KittySploit?

Security testing often requires separate tools for scanning, exploitation, traffic analysis, automation and engagement tracking.

KittySploit brings these workflows together in an extensible, Metasploit-inspired console built for modern security assessments.

  • Modular console : search, configure and execute security modules.
  • Built-in C2 : listeners, payloads, session management and post-exploitation from the same console.
  • Scanner and workflows : automate repeatable reconnaissance and testing tasks.
  • Workspaces and scopes : keep hosts, vulnerabilities and engagement boundaries organized.
  • AI-assisted planning : use local Ollama models to analyze targets and prepare testing plans.
  • Extension ecosystem : add proxy, OSINT, GUI and protocol-analysis capabilities.
  • Automation ready : interactive console, one-shot commands, RPC and API modes.
  • Mobile companion : pair the Flutter app with a one-time QR and monitor an engagement in read-only mode.

Quick Start

Linux and macOS

git clone https://github.com/SIA-IOTechnology/Kittysploit-framework.git
cd Kittysploit-framework
./install/install.sh
python3 kittyconsole.py

A one-line installer is also available:

curl -fsSL https://raw.githubusercontent.com/SIA-IOTechnology/kittysploit-framework/main/install/install-standalone.sh | bash

Windows

git clone https://github.com/SIA-IOTechnology/Kittysploit-framework.git
cd Kittysploit-framework
install\install.bat
python kittyconsole.py

Your First Session

Verify the installation:

kittysploit> doctor

Pair the mobile companion (phone and workstation must be able to reach each other):

kittysploit> mobile pair

Create a workspace and define the authorized scope:

kittysploit> workspace create demo-lab
kittysploit> scope enable
kittysploit> scope allow ip 192.168.56.0/24

Search and inspect modules:

kittysploit> search wordpress
kittysploit> show exploits
kittysploit> show auxiliary

Run a scanner against your local lab:

kittysploit> scanner -u http://192.168.56.10

AI-Assisted Planning

KittySploit can use a local Ollama model to prepare a testing plan without automatically launching intrusive actions:

kittysploit agent lab.local \
  --llm-local \
  --llm-model llama3.1:8b \
  --plan-only \
  --dry-run

The agent supports reconnaissance, analysis, planning, reporting and configurable safety profiles.

KittySploit Ecosystem

ProjectPurpose
KittyProxyWeb traffic capture and analysis
KittyCosmicGraphical interface and marketplace
KittyOsintVisual OSINT investigation
KittyProtocolProtocol analysis
KittyV8DebuggerV8 debugging and analysis

View more screenshots · Read the complete usage guide

Documentation

  • Usage guide
  • Project wiki
  • Extension marketplace
  • Report a bug or request a feature

Project Status

KittySploit 1.x provides the foundation for a broader offensive security platform.

The framework is still evolving. Interfaces and workflows may change between releases, so validate new versions in a controlled lab before using them during an engagement.

Community

KittySploit is open source and community-driven.

  • Give the repository a ⭐ to help others discover it.
  • Join the Discord community.
  • Open an issue to report a bug or suggest an improvement.
  • Support development through Liberapay.

Acknowledgments

Thanks to Woody for their contributions.

License

KittySploit is released under the MIT License.

Press Escape to close the search panel.

Donate

Buy me a Coffee

Penetration Testing Services - Fiverr

Buy me a Coffee

Penetration Testing Services

penetration Testing Services

Web Application Security Quiz

Web Application Security Quiz

Daily Bug Bounty Writeups - Twitter

Daily Bug Bounty Writeups

Download our Latest Android Application

Guide for Penetration Testing

Daily Bug Bounty Writeups - Telegram

Daily Bug Bounty Writeups

Author

Piyush
Senior Product Security Engineer

Ethical Hacker || Penetration Tester || Gamer || Blogger || Application Security Engineer

READ ARTICLE

Donate

Buy me a Coffee

Recent Posts

  • Software Supply Chain Security in 2026: Packages, Pipelines, and Provenance
    Software Supply Chain Security in 2026: Packages, Pipelines, and Provenance
    August 10, 2026/
    0 Comments
  • I Ran Codex Security on a Shop API Lab: 14 Bugs, $1.64, Full Playbook
    I Ran Codex Security on a Shop API Lab: 14 Bugs, $1.64, Full Playbook
    August 3, 2026/
    0 Comments
  • How I Would Hack Your Startup in 24 Hours (Real-World Pentest Guide)
    How I Would Hack Your Startup in 24 Hours (Real-World Pentest Guide)
    July 27, 2026/
    0 Comments

Follow Us

SecurityCipher

Practical security guides, vulnerability deep-dives, and hands-on resources for bug bounty hunters and penetration testers.

Useful Links

  • Start Here
  • Cybersecurity Jobs
  • CVE Lookup
  • Bug Bounty Programs
  • Security Conferences
  • Payload Cheatsheets
  • Interview Prep
  • Report Templates
  • Blogs
  • About
  • Contact
  • RSS Feed

Recent Post

  • Software Supply Chain Security in 2026: Packages, Pipelines, and Provenance
  • I Ran Codex Security on a Shop API Lab: 14 Bugs, $1.64, Full Playbook
  • How I Would Hack Your Startup in 24 Hours (Real-World Pentest Guide)
© 2026 SecurityCipher. All rights reserved. Privacy Policies · Terms & Conditions