Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Web Security — Page 91 | Kitploit
Categories

Web Security

Tools for testing, exploiting, and securing web applications and APIs.

Kitploit recommended

Top tools

10 selected
zaproxy preview#1

zaproxy

GitHubzaproxy/zaproxy
15.6k21h 58m ago
nuclei preview#2

nuclei

GitHubprojectdiscovery/nuclei
30.4k2 days ago
sqlmap preview#3

sqlmap

GitHubsqlmapproject/sqlmap
38.2k16h 9m ago
ffuf preview#4

ffuf

GitHubffuf/ffuf
16.5k27 days ago
dirsearch preview#5

dirsearch

GitHubmaurosoria/dirsearch
14.6k5 days ago
feroxbuster preview#6

feroxbuster

GitHubepi052/feroxbuster
8.0k8 days ago
nikto preview#7

nikto

GitHubsullo/nikto
10.6k2 months ago
wpscan preview#8

wpscan

GitHubwpscanteam/wpscan
9.7k24 days ago
XSStrike preview#9

XSStrike

GitHubs0md3v/xsstrike
15.1k1 year ago
wapiti preview#10

wapiti

GitHubwapiti-scanner/wapiti
1.9k19 days ago
NewestRelevanceMost popularRecently updated
19021 results
CVE-2019-11581 preview

CVE-2019-11581

GitHubjas502n/cve-2019-11581

Atlassian JIRA Template injection vulnerability RCE

payload-generationvulnerability-analysisexploitation+3
937 years ago
frida-ui preview

frida-ui

GitHubadityatelange/frida-ui

Interact with Frida devices, processes, and scripts directly from your browser.

android-securitydynamic-analysis-sandboxingweb-proxies-interception+5
2387 months ago
7-Zip-CVE-2025-0411-POC preview

7-Zip-CVE-2025-0411-POC

GitHubdhmosfunk/7-zip-cve-2025-0411-poc

This repository contains POC scenarios as part of CVE-2025-0411 MotW bypass.

vulnerability-analysisexploitationweb-application-exploitation+2
1551 year ago
CVE-2020-2551 preview

CVE-2020-2551

GitHubhktalent/cve-2020-2551

how detect CVE-2020-2551 poc exploit python Weblogic RCE with IIOP

reconnaissancevulnerability-analysisexploitation+3
2103 years ago
cromos preview

cromos

GitHubjimywork/cromos

Cromos is a tool for downloading legitimate extensions of the Chrome Web Store and inject codes in the background of the application.

password-crackingphishing-toolspersistence-mechanisms+5
1258 years ago
redi preview

redi

GitHubtaherio/redi

Automated script for setting up CobaltStrike redirectors (nginx reverse proxy, letsencrypt)

encryption-decryption-toolsweb-proxies-interceptionids-ips-evasion+3
1438 years ago
CVE-2021-21123-PoC-Google-Chrome preview

CVE-2021-21123-PoC-Google-Chrome

GitHubpuliczek/cve-2021-21123-poc-google-chrome

🐱‍💻 👍 Google Chrome - File System Access API - vulnerabilities reported by Maciej Pulikowski | Total Bug Bounty Reward: $5.000 | CVE-2021-21123…

phishing-toolsvulnerability-analysisexploitation+3
1755 years ago
CVE-2020-6287-exploit preview

CVE-2020-6287-exploit

GitHubduc-nt/cve-2020-6287-exploit

PoC for CVE-2020-6287 The PoC in python for add user only, no administrator permission set. Inspired by @zeroSteiner from metasploit. Original…

vulnerability-analysisexploitationweb-application-exploitation+1
966 years ago
log4j-poc preview

log4j-poc

GitHubcyberxml/log4j-poc

A Docker based LDAP RCE exploit demo for CVE-2021-44228 Log4Shell

payload-generationvulnerability-analysisexploitation+4
723 years ago
burp-vps-proxy preview

burp-vps-proxy

GitHubd3mondev/burp-vps-proxy

This Burp Suite extension allows for the automatic creation and deletion of an upstream SOCKS5 proxy on popular cloud services.

web-proxies-interceptionwaf-bypasspenetration-testing+1
2483 years ago
CVE-2024-21762 preview

CVE-2024-21762

GitHubh4x0r-dz/cve-2024-21762

out-of-bounds write in Fortinet FortiOS CVE-2024-21762 vulnerability

vulnerability-analysisexploitationweb-application-exploitation+3
1502 years ago
Eagle preview

Eagle

GitHubbitthebyte/eagle

Multithreaded Plugin based vulnerability scanner for mass detection of web-based applications vulnerabilities

vulnerability-scannersexploitationweb-application-exploitation+4
1285 years ago
cve-2016-0189 preview

cve-2016-0189

GitHubtheori-io/cve-2016-0189

Proof-of-Concept exploit for CVE-2016-0189 (VBScript Memory Corruption in IE11)

payload-generationvulnerability-analysisexploitation+2
11410 years ago
C99Shell-PHP7 preview

C99Shell-PHP7

GitHubpinoywh1z/c99shell-php7

PHP 7 and safe-build Update of the popular C99 variant of PHP Shell.

payload-generationweb-application-exploitationpost-exploitation+2
1513 years ago
noapi-google-search-mcp preview

noapi-google-search-mcp

GitHubvincentkaufmann/noapi-google-search-mcp

MCP server for Google search and page fetching using headless Chromium

osintphishing-toolsinformation-gathering+8
1202 months ago
anti-anti-automation preview

anti-anti-automation

GitHubbishopfox/anti-anti-automation

Anti-Anti-Automation Framework

web-securitypenetration-testinganti-bot+1
10012 years ago
Scanner-and-Patcher preview

Scanner-and-Patcher

GitHubmalwareman007/scanner-and-patcher

A Web Vulnerability Scanner and Patcher

reconnaissancevulnerability-scannersweb-vulnerability-scanners+8
1731 year ago
CVE-2025-59287 preview

CVE-2025-59287

GitHubjiansiting/cve-2025-59287

WSUS Unauthenticated RCE

vulnerability-analysisexploitationweb-security+1
1740 years ago
Previous1…909192…100Next