Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Web Application Exploitation — Page 85 | Kitploit
Categories

Web Application Exploitation

Tools specifically designed to exploit common web application vulnerabilities (e.g., SQL injection, XSS).

Kitploit recommended

Top tools

10 selected
sqlmap preview#1

sqlmap

GitHubsqlmapproject/sqlmap
38.2k1 day ago
beef preview#2

beef

GitHubbeefproject/beef
11.0k1 day ago
nuclei preview#3

nuclei

GitHubprojectdiscovery/nuclei
30.4k4h 39m ago
zaproxy preview#4

zaproxy

GitHubzaproxy/zaproxy
15.6k4h 42m ago
XSStrike preview#5

XSStrike

GitHubs0md3v/xsstrike
15.1k1 year ago
ffuf preview#6

ffuf

GitHubffuf/ffuf
16.5k1 month ago
dirsearch preview#7

dirsearch

GitHubmaurosoria/dirsearch
14.6k2 days ago
feroxbuster preview#8

feroxbuster

GitHubepi052/feroxbuster
8.0k3 days ago
nikto preview#9

nikto

GitHubsullo/nikto
10.6k2 months ago
wpscan preview#10

wpscan

GitHubwpscanteam/wpscan
9.7k6 days ago
NewestRelevanceMost popularRecently updated
14590 results
crlfmap preview

crlfmap

GitHubryandamour/crlfmap

CRLFMap is a tool to find HTTP Splitting vulnerabilities

vulnerability-scannersids-ips-evasionweb-application-exploitation+3
326 years ago
Hacking-Vulnerability-CVE-2020-1938-Ghostcat preview

Hacking-Vulnerability-CVE-2020-1938-Ghostcat

GitHubhancheng-lei/hacking-vulnerability-cve-2020-1938-ghostcat

Case study and exploit demonstration for CVE-2020-1938 (Ghostcat) Apache Tomcat vulnerability, including analysis and proof-of-concept code.

vulnerability-analysisexploitationweb-application-exploitation+2
215 years ago
CVE-2020-3452-Exploit preview

CVE-2020-3452-Exploit

GitHub3ndg4me/cve-2020-3452-exploit

Just basic scanner abusing CVE-2020-3452 to enumerate the standard files accessible in the Web Directory of the CISCO ASA applicances.

reconnaissancevulnerability-scannersexploitation+3
246 years ago
CVE-2020-9548 preview

CVE-2020-9548

GitHubfairyming/cve-2020-9548

CVE-2020-9548：FasterXML/jackson-databind 远程代码执行漏洞

static-analysisvulnerability-analysiscode-analysis+2
246 years ago
GeoServer-Tools-CVE-2024-36401 preview

GeoServer-Tools-CVE-2024-36401

GitHubbmth666/geoserver-tools-cve-2024-36401

CVE-2024-36401 图形化利用工具，支持各个JDK版本利用以及回显、内存马实现

vulnerability-analysisexploitationweb-application-exploitation+3
445 months ago
CVE-2017-17215 preview

CVE-2017-17215

GitHub1337g/cve-2017-17215

CVE-2017-17215 HuaWei Router RCE (NOT TESTED)

vulnerability-analysisexploitationweb-application-exploitation+2
268 years ago
CVE-2026-23918-Apache-H2-PoC preview

CVE-2026-23918-Apache-H2-PoC

GitHubxeloxa/cve-2026-23918-apache-h2-poc

Proof-of-Concept exploit for CVE-2026-23918 (Apache mod_http2 double-free). Features multi-mode DoS (Rapid-RST, Slow-Drip) and passive…

vulnerability-analysisexploitationweb-application-exploitation+2
236 months ago
readable-thrift preview

readable-thrift

GitHubnccgroup/readable-thrift

Human-friendly Thrift encoder/decoder

web-proxies-interceptionreverse-engineeringweb-application-exploitation+2
244 years ago
r3con preview

r3con

GitHubthenurhabib/r3con

Multi-functional Web Recon & Vulnerability Scanner Tool

reconnaissancevulnerability-scannersweb-application-exploitation+5
344 years ago
web-inf-path-trav preview

web-inf-path-trav

GitHubinvicti-security/web-inf-path-trav

Tool for helping in the exploitation of path traversal vulnerabilities in Java web applications

vulnerability-analysisexploitationweb-application-exploitation+3
334 years ago
CVE-2019-0232 preview

CVE-2019-0232

GitHubsetrus/cve-2019-0232

CVE-2019-0232-Remote Code Execution on Apache Tomcat 7.0.42

vulnerability-analysisexploitationweb-application-exploitation+3
206 years ago
CVE-2020-17530 preview

CVE-2020-17530

GitHubal1ex/cve-2020-17530

S2-061 CVE-2020-17530

payload-generationvulnerability-analysisexploitation+3
295 years ago
CVE-2021-39165 preview

CVE-2021-39165

GitHubw0rty/cve-2021-39165

Github repository which contains a functional exploit for CVE-2021-39165

vulnerability-analysisexploitationweb-application-exploitation+2
214 years ago
CVE-2026-60004-POC preview

CVE-2026-60004-POC

GitHubimbas007/cve-2026-60004-poc

CVE-2026-60004 Pre-Auth RCE Exploit — Gitea <= 1.27.0 diffpatch git hook injection (CVSS 9.8)

reconnaissancevulnerability-scannersexploitation+4
113 months ago
POC-CVE-2018-0114 preview

POC-CVE-2018-0114

GitHubzi0black/poc-cve-2018-0114

This repository contains the POC of an exploit for node-jose < 0.11.0

payload-generationvulnerability-analysisexploitation+3
263 years ago
pdfjs-vuln-demo preview

pdfjs-vuln-demo

GitHubsnyk-labs/pdfjs-vuln-demo

This project is intended to serve as a proof of concept to demonstrate exploiting the vulnerability in the PDF.js (pdfjs-dist) library reported in…

vulnerability-analysisexploitationweb-application-exploitation+2
106 months ago
CVE-2026-87902-Toolkit preview

CVE-2026-87902-Toolkit

GitHubtc4dy/cve-2026-87902-toolkit

WordPress CVE-2026-87902 LFI-to-RCE toolkit with a weaponized exploit chain (PEAR RCE, webshell, admin creation, loot) and a non-intrusive…

defensive-toolsvulnerability-scannerspayload-generation+8
1521 days ago
CVE-2024-7971 preview

CVE-2024-7971

GitHubmistymntncop/cve-2024-7971

Proof-of-concept writeup for CVE-2024-7971, detailing the vulnerability discovery process and providing a functional POC for security researchers and…

vulnerability-analysisexploitationweb-application-exploitation+2
351 year ago
Previous1…848586…100Next