http://www.kahusecurity.com/2014/javascript-deobfuscation-tools-redux/
[14 Best Open Source Web Application Vulnerability Scanners]
http://resources.infosecinstitute.com/14-popular-web-application-vulnerability-scanners/
Rootkit Detection: Tuluka – www.tuluka.org
Netscape格式cookie生成在线工具(w3af有时使用Netscap格式cookie)： http://crdx.org/misc/cookies/
web扫描：http://resources.infosecinstitute.com/vulnerability-scanners/
| Websecurify |
| Net Sparker Community Edition. |
| WSSA |
| NStalker |
| W3af |
| arachni |
| Acunetix |
后渗透工具：
https://github.com/HarmJ0y/PowerUp
https://www.veil-framework.com/veil-powerview/
https://github.com/mattifestation/PowerSploit
Copy /b C:\xampp\htdocs\images\1.jpg + C:\xampp\htdocs\images\eval.php C:\xampp\htdocs\images\2.jpg
dump windows密码hash
http://www.openwall.com/passwords/microsoft-windows-nt-2000-xp-2003-vista-7
web
https://w3dt.net/
httprecon http://www.computec.ch/projekte/httprecon/
默认密码查询： https://cirt.net/passwords
工具集http://resources.infosecinstitute.com/top-links-tools-compilation-pentesting-forensics-security-hacking/