本文共 498 字，大约阅读时间需要 1 分钟。

- Burp Suite 
     A fully automated, active web application security reconnaissance tool  written by Michal Zalewski of Google.  - RAFT (Response Analysis and Further TestingTool)
     RAFT is a testing tool for the identification of vulnerabilities in web  applications. RAFT is a suite of tools that utilize common shared elements  to make testing and analysis easier. The tool provides visibility in to  areas that other tools do not such as various client side storage.  - Zed Attack Proxy(ZAP)

转载地址：http://tshmb.baihongyu.com/