目录¶
信息收集 (Information Gathering)¶
- acccheck
- ace-voip
- amap
- automater
- bing-ip2hosts
- braa
- casefile
- cdpsnarf
- cisco-torch
- cookie-cadger
- copy-router-config
- dmitry
- dnmap
- dnsenum
- dnsmap
- dnsrecon
- dnstracer
- dnswalk
- dotdotpwn
- enum4linux
- enumiax
- exploitdb
- fierce
- firewalk
- fragroute
- fragrouter
- ghost-phisher
- golismero
- goofile
- hping3
- intrace
- ismtp
- lbd
- maltego-teeth
- masscan
- metagoofil
- miranda
- Nmap
- ntop
- p0f
- parsero
- recon-ng
- set
- smtp-user-enum
- snmpcheck
- sslcaudit
- sslsplit
- sslstrip
- sslyze
- thc-ipv6
- theharvester
- tlssled
- twofi
- urlcrazy
- Wireshark
- wol-e
- xplico
漏洞分析 (Vulnerability Analysis)¶
- bbqsql
- bed
- cisco-auditing-tool
- cisco-global-exploiter
- cisco-ocs
- cisco-torch
- copy-router-config
- dbpwaudit
- doona
- dotdotpwn
- greenbone-security-assistant
- gsd
- hexorbase
- inguma
- jsql
- lynis
- Nmap
- ohrwurm
- openvas-administrator
- openvas-cli
- openvas-manager
- openvas-scanner
- oscanner
- powerfuzzer
- sfuzz
- sidguesser
- siparmyknife
- SQLmap
- sqlninja
- sqlsus
- thc-ipv6
- tnscmd10g
- unix-privesc-check
- yersinia
无线攻击 (Wireless Attacks)¶
Web 应用程序 (Web Applications)¶
- apache-users
- arachni
- bbqsql
- blindelephant
- Burp Suite
- cutycapt
- davtest
- deblaze
- dirb
- dirbuster
- fimap
- funkload
- grabber
- jboss-autopwn
- joomscan
- jsql
- maltego-teeth
- padbuster
- paros
- parsero
- plecost
- powerfuzzer
- proxystrike
- recon-ng
- skipfish
- SQLmap
- sqlninja
- sqlsus
- ua-tester
- uniscan
- vega
- W3af
- webscarab
- webshag
- webslayer
- websploit
- wfuzz
- wpscan
- xsser
- zaproxy
开发工具 (Exploitation Tools)¶
取证工具 (Forensics Tools)¶
压力测试 (Stress Testing)¶
嗅探和欺骗 (Sniffing & Spoofing)¶
- Burp Suite
- dnschef
- fiked
- hamster-sidejack
- hexinject
- iaxflood
- inviteflood
- ismtp
- isr-evilgrade
- MITMProxy
- ohrwurm
- protos-sip
- rebind
- responder
- rtpbreak
- rtpinsertsound
- rtpmixsound
- sctpscan
- siparmyknife
- sipp
- sipvicious
- sniffjoke
- sslsplit
- sslstrip
- thc-ipv6
- voiphopper
- webscarab
- wifi-honey
- Wireshark
- xspy
- yersinia
- zaproxy
密码攻击 (Password Attacks)¶
- acccheck
- Burp Suite
- cewl
- chntpw
- cisco-auditing-tool
- cmospwd
- creddump
- crunch
- dbpwaudit
- findmyhash
- gpp-decrypt
- hash-identifier
- hexorbase
- THC Hydra
- john-the-ripper
- johnny
- keimpx
- maltego-teeth
- maskprocessor
- multiforcer
- Ncrack
- oclgausscrack
- pack
- patator
- phrasendrescher
- polenum
- rainbowcrack
- rcracki-mt
- rsmangler
- sqldict
- statsprocessor
- thc-pptp-bruter
- truecrack
- webscarab
- wordlists
- zaproxy