基础工具:Burpsuite,python,firefox(hackbar,foxyproxy,user-agent,swither) 扫描工具:nmap,nessus,openvas sql注入工具:sqlmapxss平台:xssplatfrom,beef文件上传工具:cknife文件包含工具:LFlsuite暴力破解工具:burp暴力破解模块,md5Crack,hydra