#1Automated tools for detecting common web application flaws (e.g., XSS, SQLi).
Kitploit recommended
jenkinsci/nuclei-pluginNuclei is a fast tool for configurable targeted vulnerability scanning based on templates offering massive extensibility and ease of use.
xuemian168/cve-2025-30208全网首发 CVE-2025-31125 CVE-2025-30208 CVE-2025-32395 Vite Scanner
orwagodfather/react2shell-scannerRSC/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)
imbas007/cve-2026-64638-pocCVE-2026-64638: WordPress Pre-auth XSS → RCE (XSS2Shell) PoC
rxerium/cve-2025-52691Detection for CVE-2025-52691
kamalx06/xxeripperBlack-box XXE scanner detecting in-band, error-based, and blind out-of-band injection via statistical baselining, parser fingerprinting, and OOB…
foxvr-sudo/bug-bounty-arsenal-v.3Full-stack platform for authorized web application security scanning with a detector-based engine, async Celery workers, and a React dashboard for…
modzero/burp-responseclustererBurp plugin that clusters responses to show an overview of received responses
salehlardhi/cve-2023-3519CVE-2023-3519 vuln for nuclei scanner
zaproxy/zap-api-rustRust client library for the OWASP ZAP API, enabling programmatic access to web application security scanning, vulnerability detection, and proxy…
hackingteamoficial/getrobarbAutomated reconnaissance and XSS detection framework integrating subfinder, httpx, katana, gospider, waybackurls, and dalfox into a 9-stage pipeline…
rxerium/cve-2025-8110Detection template for CVE-2025-8110
pentagridsec/pentagridresponseoverviewResponse Overview Extension for BurpSuite - Find exotic responses by grouping response bodies
rxerium/cve-2025-68461Detection for CVE-2025-68461
affolter-engineering/xssearchRust-based XSS scanner with context-aware payload selection, WAF detection and bypass, crawling, blind XSS callbacks, and static DOM sink analysis.
lfillaz/cve-2024-2997The tool helps in quickly identifying vulnerabilities by examining a comprehensive list of potential paths on a website, making it useful for…
hxlxmj/cve-2022-3590-wordpress-vulnerability-scannerThis repository contains a Python script that checks WordPress websites for the CVE-2022-3590 vulnerability, which exploits an unauthenticated blind…
