1.AWVS, nessus with nice
2.php other languages too important
3. The tool set according to the type of vulnerability may wish to organize it, or do the task too bother
4. The key is to master the middleware, and other knowledge often winning
5. There are many shortcomings, come on!