Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
gha-lab-677752506e — Authorized security-research lab reproducing CVE-2026-42298 (pull_request_target docker-build RCE in pr-docker-build.yml) — flattened snapshot of gitroomhq/postiz-app | Kitploit
Tools/GitHubGitHub/pvharmo2/gha-lab-677752506e
Vulnerability AnalysisExploitationLearning & EducationCurated ResourcesLabs & Practice
GitHubpvharmo2/gha-lab-677752506e

gha-lab-677752506e

Authorized security-research lab reproducing CVE-2026-42298 (pull_request_target docker-build RCE in pr-docker-build.yml) — flattened snapshot of gitroomhq/postiz-app

View Repository
15h 52m agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Automated research artifact — not the upstream project.

This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of gitroomhq/postiz-app at commit e51cae16147be77712a62fbc6fb670ada8a9f385 (2026-04-22), redistributed under that project's own licence, whose file is included unchanged in this snapshot.

The upstream project is not involved, is never targeted, and the vulnerability studied here is already public. Every secret and variable in this repository is a randomly generated dummy value — no real credential is present. Action references and runner images are pinned to what they resolved to on 2026-04-22; see pinning.md in the harness output for every change made to the snapshot.

Questions or objections: [email protected]

Postiz Logo

License

NEW: check out Postiz agent CLI! perfect for OpenClaw and other agents

Your ultimate AI social media scheduling tool


Postiz: An alternative to: Buffer.com, Hypefury, Twitter Hunter, etc...

 Postiz offers everything you need to manage your social media posts,
build an audience, capture leads, and grow your business.

Instagram Youtube Dribbble Linkedin Reddit TikTok Facebook Pinterest Threads X Slack Discord Mastodon Bluesky


Explore the docs »

Watch the YouTube Tutorials»

Register · Join Our Discord (devs only) · Public API

NodeJS SDK · N8N custom node · Make.com integration



🔌 See the leading Postiz features

Postiz

✨ Features

Image 1Image 2
Image 3Image 4

Our Sponsors

SponsorLogoDescription
HostingerHostingerHostinger is on a mission to make online success possible for anyone – from developers to aspiring bloggers and business owners
VirloVirloVirlo is the #1 social media trend spotting and all-in-one GTM tool for teams leveraging short-form video

Intro

  • Schedule all your social media posts (many AI features)
  • Measure your work with analytics.
  • Collaborate with other team members to exchange or buy posts.
  • Invite your team members to collaborate, comment, and schedule posts.
  • At the moment there is no difference between the hosted version to the self-hosted version
  • Perfect for automation (API) with platforms like N8N, Make.com, Zapier, etc.

Tech Stack

  • Pnpm workspaces (Monorepo)
  • NextJS (React)
  • NestJS
  • Prisma (Default to PostgreSQL)
  • Temporal
  • Resend (email notifications)

Quick Start

To have the project up and running, please follow the Quick Start Guide

Sponsor Postiz

We now give a few options to Sponsor Postiz:

  • Just a donation: You like what we are building, and want to buy us some coffees so we can build faster.
  • Main Repository: Get your logo with a backlink from the main Postiz repository. Postiz has almost 3m downloads and 20k views per month.
  • Main Repository + Website: Get your logo on the central repository and the main website. Here are some metrics: - Website has 20k hits per month + 65 DR (strong backlink) - Repository has 20k hits per month + Almost 3m docker downloads.

Link: https://opencollective.com/postiz

Postiz Compliance

  • Postiz is an open-source, self-hosted social media scheduling tool that supports platforms like X (formerly Twitter), Bluesky, Mastodon, Discord, and others.
  • Postiz hosted service uses official, platform-approved OAuth flows.
  • Postiz does not automate or scrape content from social media platforms.
  • Postiz does not collect, store, or proxy API keys or access tokens from users.
  • Postiz never ask users to paste API keys into our hosted product.
  • Postiz Users always authenticate directly with the social platform (e.g., X, Discord, etc.), ensuring platform compliance and data privacy.

Star History

Star History Chart

License

This repository's source code is available under the AGPL-3.0 license.




g2

Download Tool