Attack Strings:

http://code.google.com/p/fuzzdb/

http://www.owasp.org/index.php/Category:OWASP_Fuzzing_Code_Database#tab=Statements

Shells:

http://sourceforge.net/projects/yokoso/

http://sourceforge.net/projects/ajaxshell/

Scanners:

http://w3af.sourceforge.net/

http://code.google.com/p/skipfish/

http://sqlmap.sourceforge.net/

http://sqid.rubyforge.org/#next

http://packetstormsecurity.org/UNIX/scanners/XSSscan.py.txt

http://code.google.com/p/fimap/wiki/WindowsAttack

http://code.google.com/p/fm-fsf/

Proxies:

Burp:

http://www.sans.org/reading_room/whitepapers/testing/fuzzing-approach-credentials-discovery-burp-intruder_33214

http://www.gdssecurity.com/l/b/2010/08/10/constricting-the-web-the-gds-burp-api/

http://sourceforge.net/projects/belch/files/

http://www.securityninja.co.uk/application-security/burp-suite-tutorial-repeater-and-comparer-tools

http://blog.ombrepixel.com/

http://andlabs.org/tools.html#dser

http://feoh.tistory.com/22

http://www.sensepost.com/labs/tools/pentest/reduh

http://www.owasp.org/index.php/OWASP_WebScarab_NG_Project

http://intrepidusgroup.com/insight/mallory/

http://www.fiddler2.com/fiddler2/

http://websecuritytool.codeplex.com/documentation?referringTitle=Home

http://translate.google.com/translate?hl=en&sl=es&u=http://xss.codeplex.com/releases/view/43170&prev=/search%3Fq%3Dhttp://www.hackingeek.com/2010/08/x5s-encuentra-fallos-xss-lfi-rfi-en-tus.html%26hl%3Den&rurl=translate.google.com&twu=1

Social Engineering:

http://www.secmaniac.com/

Password:

http://nmap.org/ncrack/

http://www.foofus.net/~jmk/medusa/medusa.html

http://www.openwall.com/john/

http://ophcrack.sourceforge.net/

http://blog.0x3f.net/tool/keimpx-in-action/

http://code.google.com/p/keimpx/

http://sourceforge.net/projects/hashkill/

Metasploit:

MSF Exploits or Easy:

NSE:

Net Scanners and Scripts:

Post Exploitation:

Netcat:

Source Inspection:

Firefox Addons:

Tool Listings:

Training/Classes:

Sec/Hacking:

Metasploit:

Programming:

Python:

Ruby:

http://www.tekniqal.com/

Other Misc:

Web Vectors

SQLi:

Upload Tricks:

LFI/RFI:

XSS:

Coldfusion:

Sharepoint:

http://www.ethicalhacker.net/component/option,com_smf/Itemid,54/topic,6131.msg32678/#msg32678

Lotus:

JBoss:

VMWare Web:

http://www.metasploit.com/modules/auxiliary/scanner/http/vmware_server_dir_trav

Oracle App Servers:

SAP:

Wireless:

http://code.google.com/p/pyrit/

Capture the Flag/Wargames:

Conferences:

https://www.google.com/calendar/embed?src=pe2ikdbe6b841od6e26ato0asc@group.calendar.google.com&gsessionid=OK

Misc/Unsorted:

Comment by agrrr...@gmail.com, May 4, 2011

Exploits and Advisories: http://dsecrg.com/pages/vul/

Pass the Hash: http://dsecrg.blogspot.com/search/label/SMBRelay%20bible

SAP: http://erpscan.com/products/erpscan-black-free/

Blogs Worth It: http://dsecrg.blogspot.com/

Magazines: http://magazine.hackinthebox.org/ http://www.phrack.com/

Tool Listings: http://www.xxxsoft.net/

Links don't work: http://www.ikkisoft.com/stuff/SMH_XSS.txt

本文转hackfreer51CTO博客，原文链接：http://blog.51cto.com/pnig0s1992/586387，如需转载请自行联系原作者

热门

活动广场

任务中心

开发者评测

高校计划

乘风者计划

训练营

阿里云MVP

话题

直播

下载

镜像站

技术资料

插件

pentest-bookmarks(2)

Attack Strings:

Shells:

Scanners:

Proxies:

Burp:

Social Engineering:

Password:

Metasploit:

MSF Exploits or Easy:

NSE:

Net Scanners and Scripts:

Post Exploitation:

Netcat:

Source Inspection:

Firefox Addons:

Tool Listings:

Training/Classes:

Sec/Hacking:

Metasploit:

Programming:

Python:

Ruby:

Other Misc:

Web Vectors

SQLi:

Upload Tricks:

LFI/RFI:

XSS:

Coldfusion:

Sharepoint:

Lotus:

JBoss:

VMWare Web:

Oracle App Servers:

SAP:

Wireless:

Capture the Flag/Wargames:

Conferences:

Misc/Unsorted:

热门文章

最新文章

相关电子书