Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Web Application Exploitation — Page 97 | Kitploit
Categories

Web Application Exploitation

Tools specifically designed to exploit common web application vulnerabilities (e.g., SQL injection, XSS).

Kitploit recommended

Top tools

10 selected
sqlmap preview#1

sqlmap

GitHubsqlmapproject/sqlmap
38.2k1 day ago
beef preview#2

beef

GitHubbeefproject/beef
11.0k11h 33m ago
nuclei preview#3

nuclei

GitHubprojectdiscovery/nuclei
30.4k7h 4m ago
zaproxy preview#4

zaproxy

GitHubzaproxy/zaproxy
15.6k14h 20m ago
XSStrike preview#5

XSStrike

GitHubs0md3v/xsstrike
15.1k1 year ago
ffuf preview#6

ffuf

GitHubffuf/ffuf
16.5k27 days ago
dirsearch preview#7

dirsearch

GitHubmaurosoria/dirsearch
14.6k5 days ago
feroxbuster preview#8

feroxbuster

GitHubepi052/feroxbuster
8.0k8 days ago
nikto preview#9

nikto

GitHubsullo/nikto
10.6k2 months ago
wpscan preview#10

wpscan

GitHubwpscanteam/wpscan
9.7k25 days ago
NewestRelevanceMost popularRecently updated
14570 results
log4shell_1.x preview

log4shell_1.x

GitHubcckuailong/log4shell_1.x

log4j 1.x RCE Poc -- CVE-2021-4104

vulnerability-analysisexploitationweb-application-exploitation+2
204 years ago
CVE-2024-29847 preview

CVE-2024-29847

GitHubsinsinology/cve-2024-29847

Exploit for CVE-2024-29847

vulnerability-analysisexploitationweb-application-exploitation+3
192 years ago
CVE-2019-7238_Nexus_RCE_Tool preview

CVE-2019-7238_Nexus_RCE_Tool

GitHubmagicming200/cve-2019-7238_nexus_rce_tool

CVE-2019-7238 Nexus RCE漏洞图形化一键检测工具。CVE-2019-7238 Nexus RCE Vul POC Tool.

vulnerability-analysisexploitationweb-application-exploitation+3
246 years ago
CVE-2024-42327 preview

CVE-2024-42327

GitHubgodylockz/cve-2024-42327

POC for CVE-2024-42327: Zabbix Privilege Escalation -> RCE

privilege-escalationvulnerability-analysisexploitation+2
929 days ago
CVE-2019-9978 preview

CVE-2019-9978

GitHubhash3lizer/cve-2019-9978

CVE-2019-9978 - (PoC) RCE in Social WarFare Plugin (<=3.5.2)

payload-generationvulnerability-analysisexploitation+3
227 years ago
CVE-2025-31324 preview

CVE-2025-31324

GitHubredrays-io/cve-2025-31324

CVE-2025-31324, SAP Exploit

payload-generationvulnerability-analysiscode-analysis+3
241 year ago
Strutter preview

Strutter

GitHubekultek/strutter

Proof of Concept for CVE-2018-11776

osintreconnaissancevulnerability-analysis+2
218 years ago
CVE-2023-22621-POC preview

CVE-2023-22621-POC

GitHubsofianeelhor/cve-2023-22621-poc

CVE-2023-22621: SSTI to RCE by Exploiting Email Templates affecting Strapi Versions <=4.5.5

vulnerability-analysisexploitationweb-application-exploitation+3
253 years ago
flash-xdomain-xploit preview

flash-xdomain-xploit

GitHubopensecurityresearch/flash-xdomain-xploit

ActionScript Proof of Concept to perform cross-domain reads

exploitationweb-application-exploitationinformation-gathering+1
1613 years ago
CVE-2022-23940 preview

CVE-2022-23940

GitHubmanuelz120/cve-2022-23940

PoC for CVE-2022-23940

vulnerability-analysiscode-analysisexploitation+3
141 year ago
CVE-2026-42945-POC preview

CVE-2026-42945-POC

GitHubp3nt3st3r-star/cve-2026-42945-poc

Proof-of-concept exploit for CVE-2026-42945, a critical heap buffer overflow in NGINX's rewrite module enabling unauthenticated remote code…

vulnerability-analysisexploitationweb-application-exploitation+3
155 months ago
POC-CVE-2025-54988 preview

POC-CVE-2025-54988

GitHubmgthuramoemyint/poc-cve-2025-54988

A PDF generator for CVE-2025-54988

payload-generationvulnerability-analysisexploitation+3
181 year ago
CVE-2022-29455 preview

CVE-2022-29455

GitHubakhilkoradiya/cve-2022-29455

Wordpress Vulnerability - XSS ( Cross-Site Scripting )

vulnerability-analysisexploitationweb-application-exploitation+2
174 years ago
CVE-2022-0543 preview

CVE-2022-0543

GitHubz92g/cve-2022-0543

Redis 沙盒逃逸(CVE-2022-0543)POC&EXP

vulnerability-analysisexploitationweb-application-exploitation+2
244 years ago
CVE-2017-12149 preview

CVE-2017-12149

GitHubsevck/cve-2017-12149

CVE-2017-12149 JBOSS as 6.X反序列化(反弹shell版)

payload-generationvulnerability-analysisexploitation+2
228 years ago
crlf-desyncs preview

crlf-desyncs

GitHubturtlesec-software/crlf-desyncs

Nuclei templates and exploit resources for CRLF based desync attacks

vulnerability-scannersweb-application-exploitationweb-security+4
213 months ago
apache-activemq-rce-research preview

apache-activemq-rce-research

GitHubdinosn/apache-activemq-rce-research

Apache ActiveMQ Classic RCE research: CVE-2026-34197 / CVE-2026-42588 bypass chain + hardened-6.2.6 audit findings + Crowdfense comparison

vulnerability-analysisexploitationweb-application-exploitation+4
83 months ago
CVE-2020-11851 preview

CVE-2020-11851

GitHubch1nghz/cve-2020-11851

Remote Code Execution vulnerability on ArcSight Logger

vulnerability-analysisexploitationweb-application-exploitation+3
205 years ago
Previous1…969798…100Next