KittySploit

A modular offensive security framework and C2 platform for pentesters, researchers and red teams.

Scan targets, organize engagements, run security modules, operate C2 listeners and sessions, and build AI-assisted testing plans from a single console.

Get started · Documentation · Website · Discord

Why KittySploit?

Security testing often requires separate tools for scanning, exploitation, traffic analysis, automation and engagement tracking.

KittySploit brings these workflows together in an extensible, Metasploit-inspired console built for modern security assessments.

• Modular console : search, configure and execute security modules.
• Built-in C2 : listeners, payloads, session management and post-exploitation from the same console.
• Scanner and workflows : automate repeatable reconnaissance and testing tasks.
• Workspaces and scopes : keep hosts, vulnerabilities and engagement boundaries organized.
• AI-assisted planning : use local Ollama models to analyze targets and prepare testing plans.
• Extension ecosystem : add proxy, OSINT, GUI and protocol-analysis capabilities.
• Automation ready : interactive console, one-shot commands, RPC and API modes.
• Mobile companion : pair the Flutter app with a one-time QR and monitor an engagement in read-only mode.

Quick Start

Linux and macOS

git clone https://github.com/SIA-IOTechnology/Kittysploit-framework.git
cd Kittysploit-framework
./install/install.sh
python3 kittyconsole.py

A one-line installer is also available:

curl -fsSL https://raw.githubusercontent.com/SIA-IOTechnology/kittysploit-framework/main/install/install-standalone.sh | bash

Windows

git clone https://github.com/SIA-IOTechnology/Kittysploit-framework.git
cd Kittysploit-framework
install\install.bat
python kittyconsole.py

Your First Session

Verify the installation:

kittysploit> doctor

Pair the mobile companion (phone and workstation must be able to reach each other):

kittysploit> mobile pair

Create a workspace and define the authorized scope:

kittysploit> workspace create demo-lab
kittysploit> scope enable
kittysploit> scope allow ip 192.168.56.0/24

Search and inspect modules:

kittysploit> search wordpress
kittysploit> show exploits
kittysploit> show auxiliary

Run a scanner against your local lab:

kittysploit> scanner -u http://192.168.56.10

AI-Assisted Planning

KittySploit can use a local Ollama model to prepare a testing plan without automatically launching intrusive actions:

kittysploit agent lab.local \
  --llm-local \
  --llm-model llama3.1:8b \
  --plan-only \
  --dry-run

The agent supports reconnaissance, analysis, planning, reporting and configurable safety profiles.

KittySploit Ecosystem

Project	Purpose
KittyProxy	Web traffic capture and analysis
KittyCosmic	Graphical interface and marketplace
KittyOsint	Visual OSINT investigation
KittyProtocol	Protocol analysis
KittyV8Debugger	V8 debugging and analysis

View more screenshots · Read the complete usage guide

Documentation

• Usage guide
• Project wiki
• Extension marketplace
• Report a bug or request a feature

Project Status

KittySploit 1.x provides the foundation for a broader offensive security platform.

The framework is still evolving. Interfaces and workflows may change between releases, so validate new versions in a controlled lab before using them during an engagement.

Community

KittySploit is open source and community-driven.

• Give the repository a ⭐ to help others discover it.
• Join the Discord community.
• Open an issue to report a bug or suggest an improvement.
• Support development through Liberapay.

Acknowledgments

Thanks to Woody for their contributions.

License

KittySploit is released under the MIT License.