OWASP ZAP 官网
ZAP则是OWASP里的工具类项目，也是旗舰项目，全称是OWASP Zed attack proxy，是一款web application 集成渗透测试和漏洞工具，同样是免费开源跨平台的。
- 2022-05-01 - 收藏
Aircrack-ng 官网
Aircrack-ng is a complete suite of tools to assess WiFi network security.Aircrack-ng是那种，渗透测试人员不仅知道，且只要评估无线网络，就会经常用到的工具。Aircrack-ng是无线评估工具套装，覆盖数据包捕捉和攻击。
- 2022-05-01 - 收藏
Apktool 官网
A tool for reverse engineering 3rd party, closed, binary Android apps. It can decode resources to nearly original form and rebuild them after making some modifications. It also makes working with an app easier because of the project like file structure and automation of some repetitive tasks like building apk, etc.https://ibotpeaches.github.io/Apktool/
- 2022-05-01 - 收藏
Wireshark 官网
Wireshark is the world’s foremost and widely-used network protocol analyzer. It lets you see what’s happening on your network at a microscopic level and is the de facto (and often de jure) standard across many commercial and non-profit enterprises, government agencies, and educational institutions. Wireshark development thrives thanks to the volunteer contributions of networking experts around the globe and is the continuation of a project started by Gerald Combs in 1998.
- 2022-05-01 - 收藏
Fiddler 官网
Explore the Fiddler family of web debugging proxy tools and troubleshooting solutions. Easily debug, mock, capture, and modify web and network traffic.https://www.telerik.com/fiddler
- 2022-05-01 - 收藏
PortSwigger 官网
PortSwigger offers tools for web application security, testing, & scanning. Choose from a range of security tools, & identify the very latest vulnerabilities.
- 2022-05-01 - 收藏
Burp Suite 官网
Get Burp Suite. The class-leading vulnerability scanning, penetration testing, and web app security platform. Try for free today.
- 2022-05-01 - 收藏
OllyDbg 中文站
OllyDbg中文站是最权威的OllyDbg中文资料站。OllyDbg是一种具有可视化界面的32位汇编分析调试器，是一个新的动态追踪工具，将IDA与SoftICE结合起来的思想，Ring3级调试器，非常容易上手，己代替SoftICE成为当今最为流行的调试解密工具了。同时还支持插件扩展功能，是目前最强大的调试工具。
- 2022-05-01 - 收藏
OllyDbg is a 32-bit assembler level analysing debugger for Microsoft Windows. Emphasis on binary code analysis makes it particularly useful in cases where source is unavailable.