Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Web Security | Kitploit
Categories

Web Security

Tools for testing, exploiting, and securing web applications and APIs.

NewestRelevanceMost popularRecently updated
17039 results
sparty preview
Archived

sparty

GitHub0xdevalias/sparty

Sparty - MS Sharepoint and Frontpage Auditing Tool [Unofficial]

password-crackingvulnerability-scannersexploitation+4
98
12 years ago
TimeAfterFree preview

TimeAfterFree

GitHubm0x41nos/timeafterfree

Proof-of-concept PHP 8 sandbox escape exploiting a use-after-free bug to bypass disable_functions and execute system commands on Unix-like systems.

vulnerability-analysisexploitationshellcode+3
955 months ago
gitlab-rce-demo preview

gitlab-rce-demo

GitHubwupco/gitlab-rce-demo
exploitationweb-application-exploitationbinary-exploitation+1
9427 days ago
Freeloader preview

Freeloader

GitHubauthrequest/freeloader

Plex Unlocker

privilege-escalationcontainer-securitynetwork-mapping+8
921 month ago
N1QLMap preview

N1QLMap

GitHubfsecurelabs/n1qlmap

The tool exfiltrates data from Couchbase database by exploiting N1QL injection vulnerabilities.

web-application-exploitationdata-exfiltrationpenetration-testing+1
755 years ago
ExifSmugglingPoC preview

ExifSmugglingPoC

GitHubmalwaretech/exifsmugglingpoc

A Proof-of-Concept using Cache Smuggling + Exif data to passively download a second stage payload

phishing-toolspayload-generationexploitation+3
669 months ago
camjacking preview

camjacking

GitHubcappricio-securities/camjacking

CamJacking is a tool designed for use in human penetration testing tool. It is intended to simulate potential security threats by testing the…

phishing-toolsimpersonation-toolsinformation-gathering+5
635 months ago
rawsec-cybersecurity-inventory preview

rawsec-cybersecurity-inventory

GitLabrawsec/rawsec-cybersecurity-list

Curated inventory of cybersecurity tools and resources covering penetration testing, forensics, OSINT, web security, malware analysis, cryptography,…

osintvulnerability-scannersforensics+9
363 days ago
burpsuite-copy-as-xmlhttprequest preview

burpsuite-copy-as-xmlhttprequest

GitHubvulnbe/burpsuite-copy-as-xmlhttprequest

BurpSuite extension that converts HTTP requests into JavaScript XMLHttpRequest code for streamlined XSS proof-of-concept generation and web…

payload-generationweb-application-exploitationpenetration-testing
335 years ago
laravel-threat-detection preview

laravel-threat-detection

GitHubjay123anta/laravel-threat-detection

Passive Laravel middleware that detects and logs SQL injection, XSS, RCE, bot scanners, and 175+ attack patterns. Features a built-in dashboard,…

defensive-toolsvulnerability-scannersweb-security+6
312 days ago
PewSWITCH preview

PewSWITCH

GitHub0xinfection/pewswitch

A FreeSWITCH specific scanning and exploitation toolkit for CVE-2021-37624 and CVE-2021-41157.

reconnaissancevulnerability-scannersexploitation+3
304 years ago
FaceBrute preview

FaceBrute

GitHubemerinohdz/facebrute

Facebook brute forcer script

password-attacksweb-application-exploitationpenetration-testing+2
2714 years ago
tinyfilemanager-wh1z-edition preview

tinyfilemanager-wh1z-edition

GitHubpinoywh1z/tinyfilemanager-wh1z-edition

Effortlessly browse and manage your files with ease using Tiny File Manager [WH1Z-Edition], a compact single-file PHP file manager.

web-securityprivacyred-teaming
252 years ago
wprecon preview

wprecon

GitHubffx64/wprecon

WRecon, is a tool for the recognition of vulnerabilities and blackbox information for wordpress.

reconnaissancevulnerability-scannersinformation-gathering+2
204 months ago
CVE-2018-19131 preview

CVE-2018-19131

GitHubjonathanwilbur/cve-2018-19131

Proof-of-Concept exploit of CVE-2018-19131: Squid Proxy XSS via X.509 Certificate

vulnerability-analysisexploitationweb-application-exploitation+1
187 years ago
Mass-Assigner preview

Mass-Assigner

GitHubsn1r/mass-assigner

Automated tool to probe for mass assignment vulnerabilities by extracting parameters from one HTTP request and applying them to another, with support…

vulnerability-analysisapi-security-testingweb-security+1
182 years ago
CVE-2020-35846 preview

CVE-2020-35846

GitHubjohnhammond/cve-2020-35846

Python PoC for CVE-2020-35846 targeting Cockpit 0.11.1

vulnerability-analysisexploitationinformation-gathering+2
155 years ago
CVE-2024-3400 preview

CVE-2024-3400

GitHubadanikamal/cve-2024-3400

CVE-2024-3400 PAN-OS: OS Command Injection Vulnerability in GlobalProtect

vulnerability-analysisexploitationweb-security+3
81 year ago
Previous1…789…947Next