Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

103 results

gitlab-cve-2026-85706-ioc

jithinkrishnanrs/gitlab-cve-2026-85706-ioc

CVE-2026-85706 — GitLab Path Traversal IOC Scanner & Detection Toolkit. Detect and hunt for exploitation of the critical unauthenticated GitLab CE/EE…

defensive-toolsincident-responseinformation-gathering+8

23 days ago

Archived

LeakLooker

woj-ciech/leaklooker

Find open databases - Powered by Binaryedge.io

cloud-securitydatabase-securityinformation-gathering+5

1.5k6 years ago

malicious-devfile-registry

doyensec/malicious-devfile-registry

CVE-2024-0402 exploit for GitLab Workspaces using a malicious Devfile Registry with path-traversal archive to overwrite authorized_keys and gain SSH…

exploitationpenetration-testingred-teaming+3

151 year ago

gitlab-cve-2026-19478-lab

dinosn/gitlab-cve-2026-19478-lab

Reproducible A/B lab + safe PoC for GitLab CVE-2026-19478 / CVE-2026-19650 (GraphQL @gl_introduced)

api-security-testingexploitationlabs-practice+4

111 month ago

GitLab-CVE-2021-22205-

runsel/gitlab-cve-2021-22205-

Exploit for GitLab CVE-2021-22205 Unauthenticated Remote Code Execution

exploitationpenetration-testingremote-access-tool+2

34 years ago

CVE-2020-10977

kooroshrz/cve-2020-10977

Exploit for "GitLab Instance" Arbitrary server file read vulnerability

exploitationinformation-gatheringpenetration-testing+2

46 years ago

CVE-2023-7028

thanhlam-attt/cve-2023-7028

Exploit for GitLab account takeover via CVE-2023-7028, demonstrating password reset bypass by injecting attacker email to receive reset token.

authenticationexploitationpenetration-testing+2

22 years ago

gitlab-exploit

hackeremmen/gitlab-exploit

Exploit for GitLab CVE-2023-7028: password reset bypass via dual email verification, allowing unauthorized account takeover. Includes affected…

authenticationexploitationpassword-attacks+3

12 years ago

cve-2021-22205-GitLab-13.10.2---Remote-Code-Execution-RCE-Unauthenticated-

momika233/cve-2021-22205-gitlab-13.10.2---remote-code-execution-rce-unauthenticated-

Unauthenticated remote code execution exploit for GitLab 13.10.2 targeting CVE-2021-22205, enabling arbitrary command execution on vulnerable…

exploitationpenetration-testingred-teaming+2

14 years ago

CVE-2022-1175

greenwolf/cve-2022-1175

Proof-of-concept exploit for GitLab stored XSS (CVE-2022-1175) enabling personal access token theft and account takeover via malicious issue comments.

exploitationinformation-gatheringpenetration-testing+3

14 years ago

CVE-2020-10977.py

justmichi/cve-2020-10977.py

authenticated arbitrary file read for Gitlab (CVE-2020-10977)

exploitationinformation-gatheringpenetration-testing+2

5 years ago

Gitlab-CVE-2021-22205

mr-r3bot/gitlab-cve-2021-22205

Unauthenticated remote code execution exploit for GitLab versions < 13.10.3, leveraging ExifTool DjVu annotation parsing to execute arbitrary…

educationexploitationpenetration-testing+2

1814 years ago

sast-rules

gitlab-org/security-products/sast-rules

Curated Semgrep rule repository for GitLab SAST, providing static analysis patterns to detect security vulnerabilities across multiple programming…

code-analysisdevsecopseducation+2

3015 days ago

CVE-2024-32002

daemon-reconfig/cve-2024-32002

Generates reverse shell payloads targeting the GitLab-shell vulnerability CVE-2024-32002 for exploitation testing.

exploitationpayload-generationpenetration-testing+2

2 years ago

GitLab-preauth-RCE_CVE-2021-22205

findneo/gitlab-preauth-rce_cve-2021-22205

PoC in single line bash

exploitationpayload-generationpenetration-testing+3

24 years ago

CVE-2021-22205

keven1z/cve-2021-22205

Python exploit script for CVE-2021-22205 (GitLab RCE) with command execution and reverse shell capabilities. Supports one-click getshell for…

command-and-controlexploitationpayload-generation+3

124 years ago

CVE-2026-85706-PoC-Toolkit

tc4dy/cve-2026-85706-poc-toolkit

Python toolkit for CVE-2026-85706 GitLab unauth file read: weaponized exploit with loot, shell, mass scan, plus non-intrusive SafeChecker audit and…

defensive-toolsexploitationinformation-gathering+7

118 days ago

cve-2026-19478

n0xdaemon/cve-2026-19478

Provides PoC exploits and root-cause analysis for two GitLab GraphQL `@gl_introduced` directive vulnerabilities: unauthenticated method execution and…

api-security-testingexploitationvulnerability-analysis+2

1 month ago

Previous12 3 4 5 6 Next