tools.md

信息收集

https://github.com/7z1/waf_identify       #整合4款waf识别工具
https://github.com/TideSec/TideFinger     #汲取整合了多个web指纹库，结合了多种指纹检测
https://github.com/psypanda/hashID        #通过正则表达式可识别220多种hash类型
https://github.com/Smaash/snitch          #google 敏感信息收集
https://github.com/UnkL4b/GitMiner        #github 敏感信息泄露
https://github.com/Tuhinshubhra/CMSeeK    #CMS检测

扫描

https://github.com/maurosoria/dirsearch      #目录爆破
https://github.com/lijiejie/subDomainsBrute  #子域名爆破
https://github.com/p1g3/JSINFO-SCAN          #爬取js采集子域名
https://github.com/aboul3la/Sublist3r        #子域名采集
https://github.com/laramies/theHarvester     #邮箱采集

Fuzz

https://github.com/Mebus/cupp                #社工密码生成
https://github.com/xmendez/wfuzz             #web fuzzing
https://github.com/danielmiessler/SecLists   #fuzz字典

免杀

https://github.com/Ch0pin/AVIator