#1Automated tools for detecting common web application flaws (e.g., XSS, SQLi).
Kitploit recommended
strobelpierre/cve-2026-9082Semi-passive scanner that detects Drupal installations vulnerable to CVE-2026-9082 (PostgreSQL SQL injection) via fingerprinting, version detection,…
cappricio-securities/citrix-netscaler-memory-leakCitrix Netscaler ADC & Gateway v13.1-50.23 - Out-Of-Bounds Memory Read
jenderal92/livewire-vuln-scannerSimple scanner to detect vulnerable Livewire installations.
agampreet-singh/cve-2024-25202A vulnerability was found in PHPgurukul visitor management system 1.0. it has been rated as problemic. Affected by the issue is some unknown…
rxerium/cve-2022-24086An attacker could place HTML containing executable JavaScript inside element attributes. This markup becomes unescaped, causing arbitrary markup to…
rxerium/cve-2024-12084A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths…
graysignal/cve-2024-38856-apacheofbizExploit for CVE-2024-38856 affecting Apache OFBiz versions before 18.12.15
rxerium/n8n-vulnerability-detectionVulnerability detection scripts for the n8n product.
shivanshkuntal/exploitation-of-a-remote-code-execution-vulnerability--cve-2024-7954-Exploitation of a Remote Code Execution vulnerability- (CVE-2024-7954)
rk-000/log4j_scan_advanceA fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228
huseyinstif/cve-2024-28995-nuclei-templateNuclei template for detecting CVE-2024-28995, a directory traversal vulnerability in Serv-U FTP server, enabling file read via crafted HTTP requests.
rootharpy/cve-2025-25163-nuclei-templateThis repository features a Nuclei template specifically designed to detect the Path Traversal vulnerability (CVE-2025-25163) in the Plugin A/B Image…
shield-cyber/react2shell-scannerScanner to detect the presence of CVE-2025-55182 & CVE-2025-66478 on targeted web services.
0xans/cve-2024-24919Scans web applications for CVE-2024-24919 vulnerabilities via CLI, supporting a single target or wordlist-based bulk URL scanning.
sumeet-darekar/cve-2025-30208mass scan for CVE-2025-30208
kal1gh0st/mylog4shellSimple Python 3 script to detect the "Log4j" Java library vulnerability (CVE-2021-44228) for a list of URLs with multithreading
khalidhusain786/scannerwebPython3 vulnerability scanner that fuzzes all URLs of a target website and scans them for web vulnerabilities, with optional GoBuster integration for…
karthi-the-hacker/cve-2021-31589Lightweight CLI scanner for CVE-2021-31589 that checks single or multiple URLs for the vulnerability, outputting results to a file for bug bounty and…
