Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

Web Application Exploitation

Tools specifically designed to exploit common web application vulnerabilities (e.g., SQL injection, XSS).

Kitploit recommended

Top tools

10 selected
sqlmap preview#1

sqlmap

GitHubsqlmapproject/sqlmap
38.2k1 day ago
beef preview#2

beef

GitHubbeefproject/beef
11.0k1 day ago
nuclei preview#3

nuclei

GitHubprojectdiscovery/nuclei
30.4k9h 16m ago
zaproxy preview#4

zaproxy

GitHubzaproxy/zaproxy
15.6k7h 34m ago
XSStrike preview#5

XSStrike

GitHubs0md3v/xsstrike
15.1k1 year ago
ffuf preview#6

ffuf

GitHubffuf/ffuf
16.5k1 month ago
dirsearch preview#7

dirsearch

GitHubmaurosoria/dirsearch
14.6k1 day ago
feroxbuster preview#8

feroxbuster

GitHubepi052/feroxbuster
8.0k5 days ago
nikto preview#9

nikto

GitHubsullo/nikto
10.6k2 months ago
wpscan preview#10

wpscan

GitHubwpscanteam/wpscan
9.7k9 days ago
NewestRelevanceMost popularRecently updated
14717 results
CVE-2023-34960 preview

CVE-2023-34960

GitHubaituglo/cve-2023-34960

CVE-2023-34960 Chamilo PoC

vulnerability-analysisexploitationweb-application-exploitation+2
343 years ago
CVE-2026-34621 preview

CVE-2026-34621

GitHubazefzafyoussef/cve-2026-34621

Research PoC demonstrating a prototype pollution and JavaScript injection chain in Adobe Acrobat Reader, enabling privileged JavaScript execution and…

vulnerability-analysisexploitationreverse-engineering+5
235 months ago
CVE-2021-26084 preview

CVE-2021-26084

GitHub1zrr4h/cve-2021-26084

Atlassian Confluence CVE-2021-26084 one-liner mass checker

reconnaissancevulnerability-analysisexploitation+2
305 years ago
CVE-2023-34040 preview

CVE-2023-34040

GitHubpyn3rd/cve-2023-34040

Spring-Kafka-Deserialization-Remote-Code-Execution

vulnerability-analysiscode-analysisexploitation+3
323 years ago
CVE-2023-6875 preview

CVE-2023-6875

GitHubulyssessaicha/cve-2023-6875

Proof-of-concept exploit for CVE-2023-6875, demonstrating a web application vulnerability. Includes code and instructions for reproducing the issue.

vulnerability-analysisexploitationweb-application-exploitation+2
242 years ago
CVE-2021-22204 preview

CVE-2021-22204

GitHubassassinukg/cve-2021-22204

Exploit script for CVE-2021-22204, an ExifTool RCE via malicious DjVu files, with manual exploitation steps and reverse shell payloads.

vulnerability-analysiscode-analysisexploitation+3
275 years ago
CVE-2021-36260-metasploit preview

CVE-2021-36260-metasploit

GitHubtaroballzchen/cve-2021-36260-metasploit

the metasploit script(POC) about CVE-2021-36260

exploit-frameworksvulnerability-analysisexploitation+3
205 years ago
CVE-2023-21707 preview

CVE-2023-21707

GitHubn1k0la-t/cve-2023-21707

CVE-2023-21707 EXP

payload-generationvulnerability-analysisexploitation+2
283 years ago
CVE-2021-26084 preview

CVE-2021-26084

GitHubcrowsec-edtech/cve-2021-26084

Python exploit for CVE-2021-26084 targeting Confluence Server pre-authentication remote code execution via OGNL injection. Executes arbitrary…

payload-generationvulnerability-analysisexploitation+3
215 years ago
coldfusion-10-11-xss preview

coldfusion-10-11-xss

GitHubbishopfox/coldfusion-10-11-xss

Proof of Concept code for CVE-2015-0345 (APSB15-07)

vulnerability-analysisexploitationweb-application-exploitation+3
2211 years ago
CVE-2024-3400 preview

CVE-2024-3400

GitHubihebski/cve-2024-3400

CVE-2024-3400 PAN-OS: OS Command Injection Vulnerability in GlobalProtect

vulnerability-analysisexploitationweb-application-exploitation+2
342 years ago
CVE-2025-0282 preview

CVE-2025-0282

GitHubwatchtowrlabs/cve-2025-0282

Ivanti Connect Secure IFT TLS Stack Overflow pre-auth RCE (CVE-2025-0282)

vulnerability-analysisexploitationweb-application-exploitation+3
311 year ago
CVE-2026-48282 preview

CVE-2026-48282

GitHubimbas007/cve-2026-48282

Proof-of-concept exploit for CVE-2026-48282, a critical path traversal in Adobe ColdFusion RDS enabling unauthenticated file read/write and RCE.…

reconnaissancevulnerability-analysisexploitation+3
244 months ago
proxylogon preview

proxylogon

GitHubhakivvi/proxylogon

RCE exploit for Microsoft Exchange Server (CVE-2021-26855).

vulnerability-analysisexploitationweb-application-exploitation+3
224 years ago
CVE-2021-22005-metasploit preview

CVE-2021-22005-metasploit

GitHubtaroballzchen/cve-2021-22005-metasploit

the metasploit script(POC/EXP) about CVE-2021-22005 VMware vCenter Server contains an arbitrary file upload vulnerability

exploit-frameworksvulnerability-analysisexploitation+3
225 years ago
CVE-2019-10392 preview

CVE-2019-10392

GitHubjas502n/cve-2019-10392

Authenticated remote code execution exploit for Jenkins Git Client Plugin 2.8.2 via Jackson deserialization vulnerability (CVE-2019-10392).

vulnerability-analysiscode-analysisexploitation+2
217 years ago
CVE-2024-21733 preview

CVE-2024-21733

GitHubltmthink/cve-2024-21733

一个验证对CVE-2024-21733

vulnerability-analysisexploitationweb-application-exploitation+2
272 years ago
CVE-2016-6662 preview

CVE-2016-6662

GitHubmayaseven/cve-2016-6662

From SQL injection to root shell with CVE-2016-6662 by MaYaSeVeN

privilege-escalationvulnerability-analysisexploitation+2
299 years ago
Previous1…828384…100Next