Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

28 results

CVE-2026-85706-PoC-Toolkit

tc4dy/cve-2026-85706-poc-toolkit

Python toolkit for CVE-2026-85706 GitLab unauth file read: weaponized exploit with loot, shell, mass scan, plus non-intrusive SafeChecker audit and…

defensive-toolsexploitationinformation-gathering+7

18 days ago

CVE-2026-85706

gabrielunknown/cve-2026-85706

Perl PoC exploiting CVE-2026-85706, an unauthenticated GitLab path traversal enabling arbitrary file read, with bulk scanning and credential…

data-exfiltrationexploitationinformation-gathering+6

22 days ago

gitread

plur1bu5/gitread

CVE-2026-85706 · GitLab CE/EE unauthenticated file read · research PoC with oracle mode, fd enumeration, and tiered loot targeting

data-exfiltrationexploitationinformation-gathering+7

123 days ago

CVE-2026-19478

eqstlab/cve-2026-19478

Proof-of-concept exploit for CVE-2026-19478, an unauthenticated GraphQL injection in GitLab CE/EE allowing arbitrary method invocation and project…

exploitationpenetration-testingred-teaming+3

41 month ago

nord-stream

synacktiv/nord-stream

Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently supports…

data-exfiltrationdevsecopsexploitation+5

3773 months ago

GhostStrike

mylo-2001/ghoststrike

Fully automated Spring4Shell (CVE-2022-22965) + GitLab RCE framework

exploitationpayload-generationpenetration-testing+3

110 months ago

malicious-devfile-registry

doyensec/malicious-devfile-registry

CVE-2024-0402 exploit for GitLab Workspaces using a malicious Devfile Registry with path-traversal archive to overwrite authorized_keys and gain SSH…

exploitationpenetration-testingred-teaming+3

151 year ago

CVE-2024-45409

synacktiv/cve-2024-45409

Ruby-SAML / GitLab Authentication Bypass (CVE-2024-45409) exploit

authentication-authorizationexploitationpenetration-testing+3

851 year ago

CVE-2021-22205

cc3305/cve-2021-22205

Pre-authentication remote code execution exploit targeting GitLab CE/EE via ExifTool DjVu parsing. Uploads a crafted image to trigger RCE on…

exploitationpenetration-testingred-teaming+2

2 years ago

CVE-2023-7028-Account-Take-Over-Gitlab

shimon03/cve-2023-7028-account-take-over-gitlab

Proof-of-concept exploit for CVE-2023-7028, automating GitLab account takeover via password reset email manipulation. Includes temp-mail integration…

educationexploitationpenetration-testing+3

2 years ago

gitlab_honeypot

esonhugh/gitlab_honeypot

Exploit tool targeting CVE-2023-7028 in GitLab, enabling account takeover through password reset vulnerability.

exploitationpenetration-testingred-teaming+2

42 years ago

CVE-2023-7028

vozec/cve-2023-7028

This repository presents a proof-of-concept of CVE-2023-7028

exploitationpassword-attackspenetration-testing+3

2452 years ago

CVE-2023-7028

randomrobbiebf/cve-2023-7028

CVE-2023-7028

authentication-authorizationexploitationpenetration-testing+3

582 years ago

gitlab-cve-2021-22205

nukingdragons/gitlab-cve-2021-22205

A simple bash script that exploits CVE-2021-22205 against vulnerable instances of gitlab

command-and-controlexploitationpenetration-testing+3

12 years ago

CVE-2023-2825

occamsec/cve-2023-2825

GitLab CVE-2023-2825 PoC. This PoC leverages a path traversal vulnerability to retrieve the /etc/passwd file from a system running GitLab 16.0.0.

exploitationinformation-gatheringpenetration-testing+3

1403 years ago

gitlab_rce_cve-2022-2884

m3ssap0/gitlab_rce_cve-2022-2884

Exploits GitLab authenticated RCE vulnerability known as CVE-2022-2884.

exploitationpenetration-testingred-teaming+3

263 years ago

CVE-2022-2992

csenox/cve-2022-2992

Authenticated Remote Command Execution in Gitlab via GitHub import

exploitationpayload-developmentpenetration-testing+3

2233 years ago

CVE-2022-2185

esuadmin/cve-2022-2185

wo ee cve-2022-2185 gitlab authenticated rce

exploitationpenetration-testingred-teaming+2

784 years ago

Previous12 Next