Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Web Application Exploitation — Page 8 | Kitploit
Categories

Web Application Exploitation

Tools specifically designed to exploit common web application vulnerabilities (e.g., SQL injection, XSS).

Kitploit recommended

Top tools

10 selected
sqlmap preview#1

sqlmap

GitHubsqlmapproject/sqlmap
38.2k1 day ago
beef preview#2

beef

GitHubbeefproject/beef
11.0k3 days ago
nuclei preview#3

nuclei

GitHubprojectdiscovery/nuclei
30.4k14h 43m ago
zaproxy preview#4

zaproxy

GitHubzaproxy/zaproxy
15.6k7h 22m ago
XSStrike preview#5

XSStrike

GitHubs0md3v/xsstrike
15.1k1 year ago
ffuf preview#6

ffuf

GitHubffuf/ffuf
16.5k1 month ago
dirsearch preview#7

dirsearch

GitHubmaurosoria/dirsearch
14.6k8 days ago
feroxbuster preview#8

feroxbuster

GitHubepi052/feroxbuster
8.0k11 days ago
nikto preview#9

nikto

GitHubsullo/nikto
10.6k2 months ago
wpscan preview#10

wpscan

GitHubwpscanteam/wpscan
9.7k28 days ago
NewestRelevanceMost popularRecently updated
14574 results
CVE-2025-55182 preview

CVE-2025-55182

GitHubmsanft/cve-2025-55182

PoC exploit for CVE-2025-55182, demonstrating remote code execution in React Server Functions via prototype pollution and a crafted Flight Protocol…

vulnerability-analysiscode-analysisexploitation+3
1.4k10 months ago
toxssin preview

toxssin

GitHubt3l3machus/toxssin

An XSS exploitation command-line interface and payload generator.

phishing-toolspayload-generationexploitation+4
1.4k1 year ago
CredMaster preview

CredMaster

GitHubknavesec/credmaster

Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling

password-crackingreconnaissancepassword-attacks+9
1.3k1 year ago
KitHack preview

KitHack

GitHubadrmxr/kithack

Hacking tools pack & backdoors generator.

android-securitypenetration-testing-frameworkswi-fi-auditing+6
2.1k1 year ago
PocList preview

PocList

GitHub1n7erface/poclist

Vulnerability-specific PoC scripts for discovering and exploiting RCE, SQLi, XXE, SSRF, and unauthorized-access flaws in enterprise web apps and…

vulnerability-analysisexploitationweb-application-exploitation+3
1.1k3 years ago
vulnerable-code-snippets preview

vulnerable-code-snippets

GitHubyeswehack/vulnerable-code-snippets

Twitter vulnerable snippets

code-analysisweb-application-exploitationweb-security+3
1.2k8 months ago
nowafpls preview

nowafpls

GitHubassetnote/nowafpls

Burp Plugin to Bypass WAFs through the insertion of Junk Data

ids-ips-evasionweb-application-exploitationwaf-bypass+3
1.5k1 year ago
ActiveScanPlusPlus preview

ActiveScanPlusPlus

GitHubalbinowax/activescanplusplus

Burp Suite extension that extends active and passive scanning with checks for host header attacks, XXE, expression language injection, shellshock and…

defensive-toolsvulnerability-scannersweb-vulnerability-scanners+7
6696 days ago
wp2shell-poc preview

wp2shell-poc

GitHubicex0/wp2shell-poc

wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain

vulnerability-analysisexploitationweb-application-exploitation+5
7372 months ago
rogue-jndi preview

rogue-jndi

GitHubveracode-research/rogue-jndi

A malicious LDAP server for JNDI injection attacks

exploitationweb-application-exploitationctf+4
1.1k5 years ago
V3n0M-Scanner preview

V3n0M-Scanner

GitHubv3n0m-scanner/v3n0m-scanner

Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns

vulnerability-scannersexploit-frameworksdns-subdomain-enumeration+3
1.6k3 years ago
xss-cheatsheet-data preview

xss-cheatsheet-data

GitHubportswigger/xss-cheatsheet-data

Community-contributed JSON dataset of XSS payload vectors powering the PortSwigger XSS cheat sheet, with browser support and interaction metadata.

payload-generationvulnerability-analysisweb-application-exploitation+4
4763 days ago
JYso preview

JYso

GitHubqi4l/jyso

Dual-purpose JNDI injection and Java deserialization exploitation framework with advanced bypass capabilities for WAF, RASP, and high JDK versions.…

penetration-testing-frameworksexploit-frameworksmemory-forensics+5
1.8k4 months ago
Nginx-Rift preview

Nginx-Rift

GitHubdepthfirstdisclosures/nginx-rift

NGINX RCE exploits

vulnerability-analysisexploitationweb-application-exploitation+3
9173 months ago
ATSCAN preview

ATSCAN

GitHubalisamtechnology/atscan

Advanced dork Search & Mass Exploit Scanner

osintvulnerability-scannersencryption-decryption-tools+7
1.6k2 years ago
janusec preview

janusec

GitHubjanusec/janusec

Unified application gateway providing reverse proxy, WAF, CC defense, OAuth2 authentication, ACME certificate automation, and GSLB for secure,…

vulnerability-scannerscontainer-securityids-ips-evasion+8
1.2k3 months ago
shellshocker-pocs preview

shellshocker-pocs

GitHubmubix/shellshocker-pocs

Collection of Proof of Concepts and Potential Targets for #ShellShocker

vulnerability-scannersvulnerability-analysisexploitation+3
8896 years ago
htshells preview

htshells

GitHubwireghoul/htshells

Self contained htaccess shells and attacks

phishing-toolsprivilege-escalationpayload-generation+5
1.1k4 years ago
Previous1…789…100Next