analysis Tools : Grab Bag Tool: Wireshark (most used), HttpWatch,tcpdumpburp Suite: Common HTTP analysis tools, have a very evil usage;
Fiddler: The main monitoring HTTP and HTTPS, not much use;
Vulnerability Scanning Tool : AppScan: One of the most commonly used tools in the industry, a lot of information http://www.cnblogs.com/fnng/archive/2012/05/27/2520594. Htmlacunetix: A very common tool for SQL injection and vulnerability scanning
Websecurify: Open source tools, not good for ...
Drozer: Mobile phone-side security scan Tool, just learned, said to be great. Https://www.mwrinfosecurity.com/products/drozer
Ten Safety testing tools: Watch and play ... http://netsecurity.51cto.com/art/201304/391229.htm http://www.freebuf.com/tools/26503.html
The
last trick: dark clouds: Go to the dark clouds to see where it was attacked, and then give someone money. If no one is attacking, please reflect on your influence ... http://www.wooyun.org
From for notes (Wiz)
Introduction to Security testing tools (ongoing collection)