#1Automated tools for detecting common web application flaws (e.g., XSS, SQLi).
Kitploit recommended
iteride/cve-2025-2294Proof-of-concept exploit for CVE-2025-2294, a critical LFI vulnerability in Kubio AI Page Builder for WordPress. Includes a Python scanner, nuclei…
waburig/open-worldwide-application-security-project-owasp-Automated Web Vulnerability Assessment of DVWA using OWASP ZAP to identify and analyze critical security flaws like Remote Code Execution…
cappricio-securities/cve-2020-3452Cisco Adaptive Security Appliance (ASA)/Firepower Threat Defense (FTD) - Local File Inclusion
mxm0z/r2sA web-based vulnerability scanner for CVE-2025-55182, a critical Remote Code Execution (RCE) vulnerability in React Server Components.
call123x/-cve-2025-55182cve-2025-55182
cappricio-securities/behat-config-leaksBeHat Configuration file leaking
jenderal92/wordpress-default-passwordpython 2.7
psibot/apache-vulnerableDetects Apache HTTP Server path traversal vulnerabilities (CVE-2021-41773, CVE-2021-42013) by checking for exposure of /etc/passwd through…
cappricio-securities/appspec-yaml-leaksAppspec YML and YAML leaks
cappricio-securities/phpinfo-files-leaksThis tool is used to find php info page
rxerium/cve-2025-58360Passive detection for CVE-2025-58360
cappricio-securities/aem-xssAdobe Experience Manager Childlist Selector - Cross-Site Scripting
0xuho/cve-2024-2997The tool helps in quickly identifying vulnerabilities by examining a comprehensive list of potential paths on a website, making it useful for…
rxerium/fortra-goanywhere-mft-vulnerability-detectionVulnerability detection scripts for the Goanywhere MFT product.
moisestapia/http-react2shellDetection of the React Server Actions Exploit vector – CVE-2025-55182 / CVE-2025-66478
muthaiyanmani/react2shell-checkerA security vulnerability scanner for detecting the React2Shell vulnerability (CVE-2025-55182) in Next.js and React applications.
rxerium/cve-2024-57378Detection for CVE-2024-57378
shoucheng3/spring-cloud__spring-cloud-gateway_cve-2022-22947_3-0-6Spring Cloud Gateway repository demonstrating CVE-2022-22947 exploitation for API security testing and vulnerability analysis.
