Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Web Security — Page 100 | Kitploit
Categories

Web Security

Tools for testing, exploiting, and securing web applications and APIs.

Kitploit recommended

Top tools

10 selected
zaproxy preview#1

zaproxy

GitHubzaproxy/zaproxy
15.6k9h 48m ago
nuclei preview#2

nuclei

GitHubprojectdiscovery/nuclei
30.4k14h 46m ago
sqlmap preview#3

sqlmap

GitHubsqlmapproject/sqlmap
38.2k5h 59m ago
ffuf preview#4

ffuf

GitHubffuf/ffuf
16.5k1 month ago
dirsearch preview#5

dirsearch

GitHubmaurosoria/dirsearch
14.6k11 days ago
feroxbuster preview#6

feroxbuster

GitHubepi052/feroxbuster
8.0k14 days ago
nikto preview#7

nikto

GitHubsullo/nikto
10.6k2 months ago
wpscan preview#8

wpscan

GitHubwpscanteam/wpscan
9.7k2 days ago
XSStrike preview#9

XSStrike

GitHubs0md3v/xsstrike
15.1k1 year ago
wapiti preview#10

wapiti

GitHubwapiti-scanner/wapiti
1.9k25 days ago
NewestRelevanceMost popularRecently updated
19071 results
django_cve_2019_19844_poc preview

django_cve_2019_19844_poc

GitHubryu22e/django_cve_2019_19844_poc

PoC for CVE-2019-19844(https://www.djangoproject.com/weblog/2019/dec/18/security-releases/)

vulnerability-analysisexploitationweb-application-exploitation+2
1006 years ago
haptyc preview

haptyc

GitHubdefparam/haptyc

Python library for Turbo Intruder that adds payload position support and Sniper/Clusterbomb/Pitchfork attack types with tag-based test generation for…

payload-generationweb-securityfuzzing+1
945 years ago
kibana-RCE preview

kibana-RCE

GitHubjas502n/kibana-rce

kibana < 6.6.0 未授权远程代码命令执行 (Need Timelion And Canvas),CVE-2019-7609

vulnerability-analysisexploitationweb-application-exploitation+2
897 years ago
CVE-2024-21683-RCE preview

CVE-2024-21683-RCE

GitHubw01fh4cker/cve-2024-21683-rce

CVE-2024-21683 Confluence Post Auth RCE

payload-generationvulnerability-analysisexploitation+3
1272 years ago
burp-exporter preview

burp-exporter

GitHubartssec/burp-exporter

Exporter is a Burp Suite extension to copy a request to a file or the clipboard as multiple programming languages functions.

web-proxies-interceptionscripting-automationutilities-frameworks
1785 years ago
filtron preview

filtron

GitHubasciimoo/filtron

Filtering reverse HTTP proxy

defensive-toolsweb-securityapi-security
1743 years ago
CVE-2021-23132 preview

CVE-2021-23132

GitHubhoangkien1020/cve-2021-23132

com_media allowed paths that are not intended for image uploads to RCE

vulnerability-analysisexploitationweb-application-exploitation+2
715 years ago
ProxyLogon preview

ProxyLogon

GitHubp0wershe11/proxylogon

ProxyLogon(CVE-2021-26855+CVE-2021-27065) Exchange Server RCE(SSRF->GetWebShell)

payload-generationvulnerability-analysisexploitation+3
1245 years ago
SourceWolf preview

SourceWolf

GitHubksharinarayanan/sourcewolf

Amazingly fast response crawler to find juicy stuff in the source code! 😎🔥

osintreconnaissanceinformation-gathering+3
1573 years ago
chomtesh preview

chomtesh

GitHubmr-rizwan-syed/chomtesh

CHOMTE.SH is a powerful shell script designed to automate reconnaissance tasks during penetration testing. It utilizes various Go-based tools to…

osintpenetration-testing-frameworksreconnaissance+7
1348 months ago
Network-Analysis-Tools preview

Network-Analysis-Tools

GitHubazizaltuntas/network-analysis-tools

Pcap (capture file) Analysis Toolkit(v.1)

packet-sniffing-analysisnetwork-forensicsforensics+2
1109 years ago
CVE-2024-22120-RCE preview

CVE-2024-22120-RCE

GitHubw01fh4cker/cve-2024-22120-rce

Time Based SQL Injection in Zabbix Server Audit Log --> RCE

vulnerability-analysisexploitationweb-application-exploitation+2
1402 years ago
CVE-2022-21449-TLS-PoC preview

CVE-2022-21449-TLS-PoC

GitHubnotkmhn/cve-2022-21449-tls-poc

CVE-2022-21449 Proof of Concept demonstrating its usage with a client running on a vulnerable Java version and a malicious TLS server

vulnerability-analysisexploitationweb-security+2
1217 months ago
jira-mobile-ssrf-exploit preview

jira-mobile-ssrf-exploit

GitHubassetnote/jira-mobile-ssrf-exploit

Exploit code for Jira Mobile Rest Plugin SSRF (CVE-2022-26135)

reconnaissancevulnerability-analysisexploitation+3
854 years ago
cve-2021-21985_exp preview

cve-2021-21985_exp

GitHubxnianq/cve-2021-21985_exp

cve-2021-21985 exploit

payload-generationvulnerability-analysisexploitation+3
1154 years ago
CVE-2020-9484 preview

CVE-2020-9484

GitHubmasahiro331/cve-2020-9484

Educational proof-of-concept exploit for CVE-2020-9484 (Apache Tomcat RCE via session persistence). Includes Docker-based lab for testing the…

vulnerability-analysisexploitationweb-application-exploitation+2
1265 years ago
BSQLinjector preview

BSQLinjector

GitHubenjoiz/bsqlinjector

Blind SQL injection exploitation tool written in ruby.

vulnerability-analysisweb-application-exploitationpenetration-testing
1001 year ago
CVE-2026-2441-PoC preview

CVE-2026-2441-PoC

GitHubhuseyinstif/cve-2026-2441-poc

Proof-of-concept for CVE-2026-2441, a use-after-free in Chrome's CSS engine, demonstrating renderer crash and potential sandboxed code execution via…

vulnerability-analysisexploitationweb-application-exploitation+2
1368 months ago
Previous1…99100Next