
A modular offensive security framework and C2 platform for pentesters, researchers and red teams.
Scan targets, organize engagements, run security modules, operate C2 listeners and sessions, and build AI-assisted testing plans from a single console.
Get started Β· Documentation Β· Website Β· Discord
Security testing often requires separate tools for scanning, exploitation, traffic analysis, automation and engagement tracking.
KittySploit brings these workflows together in an extensible, Metasploit-inspired console built for modern security assessments.
- Modular console : search, configure and execute security modules.
- Built-in C2 : listeners, payloads, session management and post-exploitation from the same console.
- Scanner and workflows : automate repeatable reconnaissance and testing tasks.
- Workspaces and scopes : keep hosts, vulnerabilities and engagement boundaries organized.
- AI-assisted planning : use local Ollama models to analyze targets and prepare testing plans.
- Extension ecosystem : add proxy, OSINT, GUI and protocol-analysis capabilities.
- Automation ready : interactive console, one-shot commands, RPC and API modes.
git clone https://github.com/SIA-IOTechnology/Kittysploit-framework.git
cd Kittysploit-framework
./install/install.sh
python3 kittyconsole.pyA one-line installer is also available:
curl -fsSL https://raw.githubusercontent.com/SIA-IOTechnology/kittysploit-framework/main/install/install-standalone.sh | bashgit clone https://github.com/SIA-IOTechnology/Kittysploit-framework.git
cd Kittysploit-framework
install\install.bat
python kittyconsole.pyVerify the installation:
kittysploit> doctor
Create a workspace and define the authorized scope:
kittysploit> workspace create demo-lab
kittysploit> scope enable
kittysploit> scope allow ip 192.168.56.0/24
Search and inspect modules:
kittysploit> search wordpress
kittysploit> show exploits
kittysploit> show auxiliary
Run a scanner against your local lab:
kittysploit> scanner -u http://192.168.56.10
KittySploit can use a local Ollama model to prepare a testing plan without automatically launching intrusive actions:
kittysploit agent lab.local \
--llm-local \
--llm-model llama3.1:8b \
--plan-only \
--dry-runThe agent supports reconnaissance, analysis, planning, reporting and configurable safety profiles.
| Project | Purpose |
|---|---|
| KittyProxy | Web traffic capture and analysis |
| KittyCosmic | Graphical interface and marketplace |
| KittyOsint | Visual OSINT investigation |
| KittyProtocol | Protocol analysis |
| KittyV8Debugger | V8 debugging and analysis |
View more screenshots Β· Read the complete usage guide
KittySploit 1.x provides the foundation for a broader offensive security platform.
The framework is still evolving. Interfaces and workflows may change between releases, so validate new versions in a controlled lab before using them during an engagement.
KittySploit is open source and community-driven.
- Give the repository a β to help others discover it.
- Join the Discord community.
- Open an issue to report a bug or suggest an improvement.
- Support development through Liberapay.
Thanks to Woody for their contributions.
KittySploit is released under the MIT License.
