curl "https://search.kittysploit.com/api/v1/modules/latest?type=exploits&days=7&limit=20"
Search catalog
Query the live
module index.
No auth required.
Filter by type, date, CVE and author. Built for tooling, dashboards and automation against the public KittySploit catalog.
BASE
https://search.kittysploit.com/api/v1
Curl examples
Start with a single request.
Two common queries against the live index. Copy, run, adapt.
curl "https://search.kittysploit.com/api/v1/modules?q=wordpress&type=auxiliary&subtype=http&limit=20"
Routes
Six endpoints. All GET.
Read-only surface for search, latest updates, module detail, types and index metadata.
-
GET
/api/v1/modulesSearch and filter the module index.
-
GET
/api/v1/modules/latestNewest modules first. Optional
days,type,limit. -
GET
/api/v1/modules/{path}Single module detail, e.g.
exploits/linux/http/foo.py. -
GET
/api/v1/typesTypes and subtypes with counts across the catalog.
-
GET
/api/v1/metaIndex stats, commit SHA, last sync timestamps.
-
GET
/api/v1/openapi.jsonOpenAPI 3 machine-readable specification.
Query surface
Filters.
q- Full-text search (name, title, path, description)
type- exploits, auxiliary, scanner, listeners, payloads, post, …
subtype- http, linux, shell, aws, …
author- Author substring
cve- CVE id, e.g. CVE-2024-1234
since/until- Updated date window (YYYY-MM-DD or ISO-8601)
sortupdated_at,updated_at_asc,created_at,name,typepage/limit- Pagination (max limit 100)
days- On
/modules/latest— last N days only
Live request
Try it against
the real index.
No key required. Responses come straight from search.kittysploit.com.
GET https://search.kittysploit.com/api/v1/modules?limit=10
Run a request to see the JSON response.
Need the human catalog? Same index, visual browse on search.kittysploit.com.
Open the catalog ↗