WEB

记录一些学习WEB安全的好网站

https://github.com/qazbnm456/awesome-web-security

XSS

https://public-firing-range.appspot.com/

DVWA

http://www.freebuf.com/author/lonehand
https://www.youtube.com/watch?v=o7RxE_BzV4M
https://www.youtube.com/watch?v=7TJ_F-vTMsw

Kali Linux 2016.2(Rolling) 搭建 DVWA

https://segmentfault.com/a/1190000008574461

Security

www.0ke.org/index.php/archives/49/

DVWA

http://www.freebuf.com/?s=DVWA

漏洞扫描工具

Web Application Vulnerability Scanner
https://github.com/dermotblair/webvulscan

Web-For-Pentester

http://uknowsec.cn/posts/notes/Web-For-Pentester-I-%E7%BB%83%E4%B9%A0%E7%AC%94%E8%AE%B0.html

SQL注入

https://gbhackers.com/sqlmap-detecting-exploiting-sql-injection/

Web Security Learning

https://github.com/CHYbeta/Web-Security-Learning

最好用的开源Web漏扫工具梳理

http://www.freebuf.com/articles/web/155209.html