Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Web Application Exploitation — Page 95 | Kitploit
Categories

Web Application Exploitation

Tools specifically designed to exploit common web application vulnerabilities (e.g., SQL injection, XSS).

Kitploit recommended

Top tools

10 selected
sqlmap preview#1

sqlmap

GitHubsqlmapproject/sqlmap
38.2k1 day ago
beef preview#2

beef

GitHubbeefproject/beef
11.0k15h 54m ago
nuclei preview#3

nuclei

GitHubprojectdiscovery/nuclei
30.4k8h 23m ago
zaproxy preview#4

zaproxy

GitHubzaproxy/zaproxy
15.6k15h 6m ago
XSStrike preview#5

XSStrike

GitHubs0md3v/xsstrike
15.1k1 year ago
ffuf preview#6

ffuf

GitHubffuf/ffuf
16.5k1 month ago
dirsearch preview#7

dirsearch

GitHubmaurosoria/dirsearch
14.6k8 days ago
feroxbuster preview#8

feroxbuster

GitHubepi052/feroxbuster
8.0k11 days ago
nikto preview#9

nikto

GitHubsullo/nikto
10.6k2 months ago
wpscan preview#10

wpscan

GitHubwpscanteam/wpscan
9.7k6h 5m ago
NewestRelevanceMost popularRecently updated
14576 results
CVE-2022-30778 preview

CVE-2022-30778

GitHubkang8/cve-2022-30778

Case for CVE-2022-30778

vulnerability-analysiscode-analysisexploitation+2
224 years ago
CVE-2024-53375 preview

CVE-2024-53375

GitHubthottysploity/cve-2024-53375

TP-Link Archer AXE75 Authenticated Command Injection

iot-securityvulnerability-analysisexploitation+4
211 year ago
CVE-2023-28324 preview

CVE-2023-28324

GitHubhorizon3ai/cve-2023-28324

Ivanti EPM AgentPortal RCE Vulnerability

vulnerability-analysisexploitationweb-application-exploitation+3
202 years ago
php-app-race-condition preview

php-app-race-condition

GitHubprojectdiscovery/php-app-race-condition

Vulnerable demo application for the race condition

vulnerability-analysisweb-application-exploitationpenetration-testing+2
225 years ago
CVE-2019-8943 preview

CVE-2019-8943

GitHuboussama-rahali/cve-2019-8943

Exploit of CVE-2019-8942 and CVE-2019-8943

vulnerability-analysisexploitationweb-application-exploitation+3
245 years ago
cve-2026-103956-loom-unauth preview

cve-2026-103956-loom-unauth

GitHubabraxas/cve-2026-103956-loom-unauth

CVE-2026-103956 - Loom for AWS - Critical - Auth bypass - unauthenticated super-admin when no IdP is configured

vulnerability-analysisexploitationweb-application-exploitation+5
820 days ago
CVE-2024-4885 preview

CVE-2024-4885

GitHubsinsinology/cve-2024-4885

Exploit for CVE-2024-4885

vulnerability-analysisexploitationweb-application-exploitation+3
172 years ago
cve-2022-31898 preview

cve-2022-31898

GitHubgigaryte/cve-2022-31898

Proof-of-concept exploit for CVE-2022-31898, a command injection vulnerability in GL-iNet routers (firmware < 3.215). Provides reverse shell via…

iot-securityvulnerability-analysisexploitation+3
183 years ago
CVE-2024-42327 preview

CVE-2024-42327

GitHubcompr00t/cve-2024-42327

Proof-of-concept exploit for CVE-2024-42327, an SQL injection vulnerability in Zabbix frontend API allowing non-admin users to execute arbitrary SQL…

vulnerability-analysisexploitationweb-application-exploitation+2
181 year ago
CVE-2016-8776 preview

CVE-2016-8776

GitHubakzedevops/cve-2016-8776

frp bypass without account overwrite

authentication-authorizationvulnerability-analysisexploitation+2
159 years ago
CVE-2023-35803 preview

CVE-2023-35803

GitHublachlan2k/cve-2023-35803

PoC exploit for CVE-2023-35803 unauthenticated buffer overflow in Aerohive HiveOS/Extreme Networks IQ Engine, enabling remote code execution on…

iot-securityvulnerability-analysisexploitation+3
233 years ago
springshell-rce-poc preview

springshell-rce-poc

GitHubdduarte/springshell-rce-poc

CVE-2022-22965 - CVE-2010-1622 redux

vulnerability-analysiscode-analysisexploitation+3
193 years ago
CVE-2017-7921 preview

CVE-2017-7921

GitHubburnymcdull/cve-2017-7921

海康威视未授权访问检测poc及口令爆破

password-attacksvulnerability-analysisexploitation+2
365 years ago
CVE-2022-25262 preview

CVE-2022-25262

GitHubyuriisanin/cve-2022-25262

PoC + vulnerability details for CVE-2022-25262 / JetBrains Hub single-click SAML response takeover

vulnerability-analysisexploitationweb-application-exploitation+3
174 years ago
CVE-2019-3394 preview

CVE-2019-3394

GitHubjas502n/cve-2019-3394

Confluence（<install-directory>/confluence/WEB-INF/）文件读取漏洞

vulnerability-analysisexploitationweb-application-exploitation+2
177 years ago
CVE-2021-40444 preview

CVE-2021-40444

GitHubk8gege/cve-2021-40444

Exploit toolkit for CVE-2021-40444 MSHTML remote code execution, featuring DLL payload generation, Office document crafting, and lateral movement…

payload-generationexploitationlateral-movement+3
225 years ago
LetMeFuckIt-Scanner preview

LetMeFuckIt-Scanner

GitHubviniciushenriqueti/letmefuckit-scanner

Scanner and Exploit for Magento 1.9

vulnerability-scannersexploitationweb-application-exploitation+1
1411 years ago
CVE-2023-4169_CVE-2023-3306_CVE-2023-4415 preview

CVE-2023-4169_CVE-2023-3306_CVE-2023-4415

GitHubthedarknessdied/cve-2023-4169_cve-2023-3306_cve-2023-4415

Ruijie-RG-EW1200G CVE-2023-4169_CVE-2023-3306_CVE-2023-4415

password-attacksvulnerability-analysisexploitation+3
293 years ago
Previous1…949596…100Next