[持续更新]工具集

[Javascript Deobfuscation Tools Redux]
http://www.kahusecurity.com/2014/javascript-deobfuscation-tools-redux/

[14 Best Open Source Web Application Vulnerability Scanners]
http://resources.infosecinstitute.com/14-popular-web-application-vulnerability-scanners/

Rootkit Detection: Tuluka – www.tuluka.org

Netscape格式cookie生成在线工具(w3af有时使用Netscap格式cookie)：http://crdx.org/misc/cookies/

web扫描：http://resources.infosecinstitute.com/vulnerability-scanners/

Websecurify

Net Sparker Community Edition.

WSSA

NStalker

W3af

arachni

Acunetix

后渗透工具：
https://github.com/HarmJ0y/PowerUp
https://www.veil-framework.com/veil-powerview/
https://github.com/mattifestation/PowerSploit


Copy /b C:\xampp\htdocs\images\1.jpg + C:\xampp\htdocs\images\eval.php C:\xampp\htdocs\images\2.jpg

dump windows密码hash
http://www.openwall.com/passwords/microsoft-windows-nt-2000-xp-2003-vista-7

web
https://w3dt.net/
httprecon http://www.computec.ch/projekte/httprecon/

默认密码查询：https://cirt.net/passwords

工具集http://resources.infosecinstitute.com/top-links-tools-compilation-pentesting-forensics-security-hacking/