
A modular offensive security framework and C2 platform for pentesters, researchers and red teams.
Scan targets, organize engagements, run security modules, operate C2 listeners and sessions, and build AI-assisted testing plans from a single console.
Security testing often requires separate tools for scanning, exploitation, traffic analysis, automation and engagement tracking.
KittySploit brings these workflows together in an extensible, Metasploit-inspired console built for modern security assessments.
- Modular console : search, configure and execute security modules.
- Built-in C2 : listeners, payloads, session management and post-exploitation from the same console.
- Scanner and workflows : automate repeatable reconnaissance and testing tasks.
- Workspaces and scopes : keep hosts, vulnerabilities and engagement boundaries organized.
- AI-assisted planning : use local Ollama models to analyze targets and prepare testing plans.
- Extension ecosystem : add proxy, OSINT, GUI and protocol-analysis capabilities.
- Automation ready : interactive console, one-shot commands, RPC and API modes.
- Mobile companion : pair the Flutter app with a one-time QR and monitor an engagement in read-only mode.
git clone https://github.com/SIA-IOTechnology/Kittysploit-framework.git
cd Kittysploit-framework
./install/install.sh
python3 kittyconsole.pyA one-line installer is also available:
curl -fsSL https://raw.githubusercontent.com/SIA-IOTechnology/kittysploit-framework/main/install/install-standalone.sh | bashgit clone https://github.com/SIA-IOTechnology/Kittysploit-framework.git
cd Kittysploit-framework
install\install.bat
python kittyconsole.pyVerify the installation:
kittysploit> doctor
Pair the mobile companion (phone and workstation must be able to reach each other):
kittysploit> mobile pair
Create a workspace and define the authorized scope:
kittysploit> workspace create demo-lab
kittysploit> scope enable
kittysploit> scope allow ip 192.168.56.0/24
Search and inspect modules:
kittysploit> search wordpress
kittysploit> show exploits
kittysploit> show auxiliary
Run a scanner against your local lab:
kittysploit> scanner -u http://192.168.56.10
KittySploit can use a local Ollama model to prepare a testing plan without automatically launching intrusive actions:
kittysploit agent lab.local \
--llm-local \
--llm-model llama3.1:8b \
--plan-only \
--dry-runThe agent supports reconnaissance, analysis, planning, reporting and configurable safety profiles.
| Project | Purpose |
|---|---|
| KittyProxy | Web traffic capture and analysis |
| KittyCosmic | Graphical interface and marketplace |
| KittyOsint | Visual OSINT investigation |
| KittyProtocol | Protocol analysis |
| KittyV8Debugger | V8 debugging and analysis |
View more screenshots · Read the complete usage guide
KittySploit 1.x provides the foundation for a broader offensive security platform.
The framework is still evolving. Interfaces and workflows may change between releases, so validate new versions in a controlled lab before using them during an engagement.
KittySploit is open source and community-driven.
- Give the repository a ⭐ to help others discover it.
- Join the Discord community.
- Open an issue to report a bug or suggest an improvement.
- Support development through Liberapay.
Thanks to Woody for their contributions.
KittySploit is released under the MIT License.
