本指南介绍安全从业人员必备的常用工具，包括Web Hacking 101 中文版、Kali Linux Web渗透测试秘籍以及子域名枚举工具等。

Discover five top open source OSINT tools for security researchers: Maltego, Recon-Ng, theHarvester, Shodan and Google Dorks. Learn how these powerful tools aid

WebVulScan是一款专业的Web应用程序漏洞扫描工具，能够自动检测并报告常见的安全问题如反射和存储的XSS、SQL注入等。适用于远程或本地网站的安全评估。

HconSTF是一个开源的安全评估工具包，提供Fire base和Aqua base两种版本，支持多种操作系统。适用于Web渗透测试、漏洞利用开发等任务。

了解Windows 10中的Windows Defender Application Control如何通过可配置代码完整性（CI）和虚拟化基于硬件的安全性保护企业免受恶意软件攻击。

Discover Passionfruit, a powerful iOS application black-box auditing tool. It supports unjailbroken devices and provides comprehensive features such as screen s

FireEye开源了其ICE团队开发的密码破解工具GoCrack，可在多机器上部署破解任务，并支持网页管理界面。了解如何使用Docker和GPU增强性能，以及其在安全测试中的应用。

Discover three simple steps to protect your online identity and make it difficult for hackers or companies to track you. Learn about using Tor and VPNs for enha

Discover the updated FruityWifi 2.0, an advanced open-source wireless network auditing tool featuring a new UI and supporting Realtek cards, 3G/4G connectivity,

Discover Passionfruit, an advanced iOS application black box auditing tool that supports un-jailbroken devices and offers comprehensive features like App metada

Xenotix是一个先进的开源XSS漏洞检测和利用框架，包含独特的三重浏览器引擎嵌入式扫描仪及丰富的XSS开发模块。适用于安全测试与概念验证。

ASLR Process Scanner is a free command-line tool to display all processes that have Address Space Layout Randomization (ASLR) enabled. Use this utility on Windo