#1Automated tools for detecting common web application flaws (e.g., XSS, SQLi).
Kitploit recommended

Proof-of-concept code and research notes for QPACK/HTTP-3 vulnerabilities (CVE-2025-64702, CVE-2026-12523, CVE-2025-13945) for authorized lab testing.
Collection of CVE findings, proof-of-concept references, and vulnerability research notes, including ExploitDB entries and credited security…

Python3 tool that detects and exploits Local File Inclusion vulnerabilities, with crawling, path traversal and filter bypass payloads, and automated…

Comprehensive XSS reference covering reflected, stored, DOM and blind payloads, filter bypass, WAF evasion, CSP bypass, mXSS, and real-world CVE case…