极安全-JiSec

首先mac 是自带了php环境 我们需要自己再安装一个php然后替换掉原有的php就可以了 1.安装homebrew homebrew是mac下非常好用的包管理器，会自动安装相关的依赖包，将你从繁琐的软件依赖安装中解放出来。 安装homebrew也非常简单，只要在终端中输入: ruby -e "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/master/install)" homebrew的常用命令: brew update #更新可安装包的最新信息，建议每次安装前都运...

Netsparker是一款综合型的web应用安全漏洞扫描工具，它分为专业版和免费版，免费版的功能也比较强大。Netsparker与其他综合 性的web应用安全扫描工具相比的一个特点是它能够更好的检测SQL Injection和 Cross-site Scripting类型的安全漏洞。 新版本特性 * DOM跨站脚本漏洞检测 * 基于Chrome浏览器的Dom解析 * URL重写规则 * 可晒出某些不必要的扫描结果 新安全检测功能 * Nginx服务器旧版本检测 * Perl源代码泄露 * Python...

  github地址：https://github.com/infobyte/faraday Faraday introduces a new concept - IPE (Integrated Penetration-Test Environment) a multiuser Penetration test IDE. Designed for distribution, indexation and analysis of the data generated during a security audit. The main purpose of Faraday is to re-use the available tools in the community to take advantage of them in a multiuser way. D...

黑帽大会开源扫描神器【bearded-develop】 bearded-develop 一款用go语言编写的扫描神器 github地址: https://github.com/bearded-web/bearded Bearded (WIP) Bearded is an open source Security Automation platform. The platform allows Development, QA, and Security team members to perform automated web security scans with a set of tools, and re-execute those scans as needed. All tools can be executed ...