KittySploit is an open-source offensive-security ecosystem designed for authorized penetration testing, cybersecurity research and security workflow automation.
Rather than being limited to a single interface or use case, KittySploit combines a central framework with independent extensions dedicated to reconnaissance, web traffic analysis, distributed operations, protocol research, debugging and graphical interaction.
- Authorized penetration testing
- Cybersecurity research
- Reconnaissance and OSINT
- HTTP, HTTPS and API traffic analysis
- Security workflow automation
- Collaborative security operations
- Distributed security testing
- Protocol analysis
- JavaScript engine research
- AI-assisted security workflows
- Extension-based development
KittySploit Framework is the core of the ecosystem.
It provides a modular foundation for loading security modules, managing extensions, organizing workspaces and connecting different security workflows inside a unified environment.
- Provide a modern and modular offensive-security platform
- Simplify the creation and integration of security modules
- Connect reconnaissance, analysis and testing workflows
- Support command-line and graphical interfaces
- Enable collaborative security operations
- Support AI-assisted planning through local language models
- Encourage open-source security research
- Provide a foundation for future cybersecurity technologies
The KittySploit ecosystem includes several companion projects and extensions.
Each component focuses on a specific security workflow while remaining connected to the main framework.
| Extension | Purpose |
|---|---|
| KittyProxy | HTTP and HTTPS interception proxy for inspecting browser traffic, APIs, WebSockets and captured requests. |
| KittyOSINT | Graphical OSINT interface for running reconnaissance modules and visualizing relationships between discovered entities. |
| KittyCluster | Central dashboard for managing authorized KittySploit nodes and distributed security workflows. |
| KittyCosmic | Graphical interface designed to simplify interaction with the KittySploit ecosystem. |
| KittyProtocol | Extension dedicated to protocol-oriented analysis and network-security research. |
| KittyV8Debugger | Security-oriented debugging environment for studying and analyzing the V8 JavaScript engine. |
KittySploit is designed as a modular ecosystem rather than a single standalone tool.
The main framework acts as the foundation, while extensions provide specialized interfaces and capabilities.
SIA IOTechnology
│
└── KittySploit Ecosystem
│
├── KittySploit Framework
│ ├── Modules
│ ├── Sessions
│ ├── Workspaces
│ ├── Automation
│ └── AI-assisted workflows
│
├── KittyProxy
├── KittyOSINT
├── KittyCluster
├── KittyCosmic
├── KittyProtocol
└── KittyV8Debugger
Why KittySploit?
Security testing often requires separate tools for scanning, exploitation, traffic analysis, automation and engagement tracking.
KittySploit brings these workflows together in an extensible, Metasploit-inspired console built for modern security assessments.
- Modular console : search, configure and execute security modules.
- Built-in C2 : listeners, payloads, session management and post-exploitation from the same console.
- Scanner and workflows : automate repeatable reconnaissance and testing tasks.
- Workspaces and scopes : keep hosts, vulnerabilities and engagement boundaries organized.
- AI-assisted planning : use local Ollama models to analyze targets and prepare testing plans.
- Extension ecosystem : add proxy, OSINT, GUI and protocol-analysis capabilities.
- Automation ready : interactive console, one-shot commands, RPC and API modes.
- Mobile companion : pair the Flutter app with a one-time QR and monitor an engagement in read-only mode.
git clone https://github.com/SIA-IOTechnology/Kittysploit-framework.git
cd Kittysploit-framework
./install/install.sh
python3 kittyconsole.pyA one-line installer is also available:
curl -fsSL https://raw.githubusercontent.com/SIA-IOTechnology/kittysploit-framework/main/install/install-standalone.sh | bashgit clone https://github.com/SIA-IOTechnology/Kittysploit-framework.git
cd Kittysploit-framework
install\install.bat
python kittyconsole.pyVerify the installation:
kittysploit> doctor
Pair the mobile companion (phone and workstation must be able to reach each other):
kittysploit> mobile pair
Create a workspace and define the authorized scope:
kittysploit> workspace create demo-lab
kittysploit> scope enable
kittysploit> scope allow ip 192.168.56.0/24
Search and inspect modules:
kittysploit> search wordpress
kittysploit> show exploits
kittysploit> show auxiliary
Run a scanner against your local lab:
kittysploit> scanner -u http://192.168.56.10
KittySploit can use a local Ollama model to prepare a testing plan without automatically launching intrusive actions:
kittysploit agent lab.local \
--llm-local \
--llm-model llama3.1:8b \
--plan-only \
--dry-runThe agent supports reconnaissance, analysis, planning, reporting and configurable safety profiles.
