Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Web Security — Page 85 | Kitploit
Categories

Web Security

Tools for testing, exploiting, and securing web applications and APIs.

Kitploit recommended

Top tools

10 selected
zaproxy preview#1

zaproxy

GitHubzaproxy/zaproxy
15.6k7h 30m ago
nuclei preview#2

nuclei

GitHubprojectdiscovery/nuclei
30.4k11h 31m ago
sqlmap preview#3

sqlmap

GitHubsqlmapproject/sqlmap
38.2k5h 55m ago
ffuf preview#4

ffuf

GitHubffuf/ffuf
16.5k1 month ago
dirsearch preview#5

dirsearch

GitHubmaurosoria/dirsearch
14.6k9 days ago
feroxbuster preview#6

feroxbuster

GitHubepi052/feroxbuster
8.0k12 days ago
nikto preview#7

nikto

GitHubsullo/nikto
10.6k2 months ago
wpscan preview#8

wpscan

GitHubwpscanteam/wpscan
9.7k19h 45m ago
XSStrike preview#9

XSStrike

GitHubs0md3v/xsstrike
15.1k1 year ago
wapiti preview#10

wapiti

GitHubwapiti-scanner/wapiti
1.9k23 days ago
NewestRelevanceMost popularRecently updated
19041 results
CVE-2022-30190 preview

CVE-2022-30190

GitHubonecloudemoji/cve-2022-30190

CVE-2022-30190 Follina POC

payload-generationvulnerability-analysisexploitation+2
1044 years ago
All-CEHv13-Module-wise-PDF-Reports preview

All-CEHv13-Module-wise-PDF-Reports

GitHubaniket2912/all-cehv13-module-wise-pdf-reports

Practical labs, notes, and reports for CEH v13 modules — covering web hacking, network pentesting, malware analysis, social engineering, and security…

iot-securityvulnerability-analysisweb-security+9
1349 months ago
OAUTHScan preview

OAUTHScan

GitHubakabe1/oauthscan

Burp Suite Extension useful to verify OAUTHv2 and OpenID security

authentication-authorizationvulnerability-scannersapi-security-testing+6
1782 years ago
CVE-2021-40444_builders preview

CVE-2021-40444_builders

GitHubaslitsecurity/cve-2021-40444_builders

This repo contain builders of cab file, html file, and docx file for CVE-2021-40444 exploit

payload-generationexploitationweb-application-exploitation+2
1735 years ago
WebView2-Cookie-Stealer preview

WebView2-Cookie-Stealer

GitHubmrd0x/webview2-cookie-stealer

Injects JavaScript keylogger into WebView2 pages to capture keystrokes and exfiltrate cookies from Microsoft authentication sessions via HTTP GET…

password-attacksweb-application-exploitationdata-exfiltration+2
2664 years ago
forbidden preview

forbidden

GitHubivan-sincek/forbidden

Bypass 4xx HTTP response status codes and more. The tool is based on Python Requests, PycURL, and HTTP Client.

vulnerability-scannersids-ips-evasionweb-application-exploitation+5
2571 year ago
Telewreck preview

Telewreck

GitHubcapt-meelo/telewreck

A Burp extension to detect and exploit versions of Telerik Web UI vulnerable to CVE-2017-9248.

vulnerability-scannersexploitationweb-application-exploitation+1
968 years ago
dvcsharp-api preview

dvcsharp-api

GitHubappsecco/dvcsharp-api

Damn Vulnerable C# Application (API)

vulnerability-analysisweb-application-exploitationapi-security-testing+3
853 years ago
PocList preview

PocList

GitHubsma11new/poclist

漏洞POC、EXP合集,持续更新。Apache Druid-任意文件读取(CVE-2021-36749)、ConfluenceRCE(CVE-2021-26084)、ZeroShell防火墙RCE(CVE-2019-12725)、ApacheSolr任意文件读取、蓝凌OA任意文件读取、phpStud…

vulnerability-scannerspayload-generationvulnerability-analysis+3
1764 years ago
WEBFANG preview

WEBFANG

GitHubtalyx66/webfang

WEBFANG, is my first CLI, a modular OSINT & Reconnaissance toolkit curated for Ethical Hackers and Red-Teamers. Sink fangs into web targets using a…

osintreconnaissanceinformation-gathering+6
1171 month ago
CVE-2024-4367-PoC preview

CVE-2024-4367-PoC

GitHublourc0d3/cve-2024-4367-poc

CVE-2024-4367 & CVE-2024-34342 Proof of Concept

vulnerability-analysisexploitationweb-application-exploitation+2
2032 years ago
chakra-2016-11 preview

chakra-2016-11

GitHubtheori-io/chakra-2016-11

Proof-of-Concept exploit for Edge bugs (CVE-2016-7200 & CVE-2016-7201)

vulnerability-analysisexploitationweb-application-exploitation+2
1409 years ago
TProxer preview

TProxer

GitHubethicalhackingplayground/tproxer

A Burp Suite extension made to automate the process of finding reverse proxy path based SSRF.

vulnerability-analysisweb-application-exploitationapi-security-testing+2
1844 years ago
mzap preview

mzap

GitHubhahwul/mzap

⚡️ Multiple target ZAP Scanning

vulnerability-scannersdynamic-analysis-sandboxingapi-security-testing+3
11213 days ago
Gitlab-CVE-2021-22205 preview

Gitlab-CVE-2021-22205

GitHubmr-r3bot/gitlab-cve-2021-22205

Unauthenticated remote code execution exploit for GitLab versions < 13.10.3, leveraging ExifTool DjVu annotation parsing to execute arbitrary…

vulnerability-analysisexploitationweb-application-exploitation+2
1814 years ago
nodexp preview

nodexp

GitHubesmog/nodexp

NodeXP - A Server Side Javascript Injection tool capable of detecting and exploiting Node.js vulnerabilities

vulnerability-scannerspayload-generationexploitation+2
1071 year ago
DDos_Attack.py preview

DDos_Attack.py

GitHubakashblackhat/ddos_attack.py

NetSTRIK is a powerful DDoS (Distributed Denial of Service) attack tool that simulates heavy traffic to test the robustness and security of servers,…

web-securitynetwork-securitypenetration-testing
1681 year ago
linkedin-extension-fingerprinting preview

linkedin-extension-fingerprinting

GitHubmdp/linkedin-extension-fingerprinting

Documents and identifies 2,953 Chrome extensions silently probed by LinkedIn, providing tools to fetch extension names and analyze browser…

osintreconnaissancedata-exfiltration+4
2158 months ago
Previous1…848586…100Next