> For the complete documentation index, see [llms.txt](https://hacking-notes.jord4n.pro/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://hacking-notes.jord4n.pro/zh/hacking-tools/web.md).

# Web 应用测试工具

将此类别用于 Web 应用测试工作流程：代理流量、验证注入点、扫描 Web 模块、发现隐藏内容、识别技术栈、研究载荷，以及检查 WAF 行为。

## 工具与资源

<table data-view="cards" data-full-width="false" data-search="false"><thead><tr><th></th><th></th><th></th><th data-hidden data-card-target data-type="content-ref"></th></tr></thead><tbody><tr><td><h3><i class="fa-bug" style="color:$primary;">:bug:</i></h3></td><td><h4>Burp Suite</h4></td><td>Burp Suite Web 渗透测试笔记，涵盖 Proxy 拦截、Repeater 验证、Intruder 自动化、Comparer 分析、HTTP 请求操控、载荷测试、认证测试、漏洞确认和证据收集。</td><td><a href="/pages/ea09800bdf93289dbf49f90b7853ba244eea4295">/pages/ea09800bdf93289dbf49f90b7853ba244eea4295</a></td></tr><tr><td><h3><i class="fa-database" style="color:$primary;">:database:</i></h3></td><td><h4>SQLMap</h4></td><td>SQLMap 渗透测试笔记，涵盖 SQL 注入检测、DBMS 指纹识别、数据库枚举、表和列发现、数据转储、基于 Cookie 的测试、风险和等级调节、操作系统 Shell 工作流、SQLite 测试以及手动 SQL 注入验证。</td><td><a href="/pages/2ecf6dff80fee57a9032cfc2f7c015fd9ec76cb0">/pages/2ecf6dff80fee57a9032cfc2f7c015fd9ec76cb0</a></td></tr><tr><td><h3><i class="fa-shield-halved" style="color:$primary;">:shield-halved:</i></h3></td><td><h4>PHP 安全扫描器</h4></td><td>仅限订阅者的 PHP 静态分析工作流，涵盖危险函数、源到汇审查、不安全配置、上传风险、反序列化、SSRF 和权限提升迹象。</td><td><a href="/pages/5bfe6c0efa3d9ee266d49ac5d45855e1a4206b00">/pages/5bfe6c0efa3d9ee266d49ac5d45855e1a4206b00</a></td></tr><tr><td><h3><i class="fa-globe" style="color:$primary;">:globe:</i></h3></td><td><h4>WMAP</h4></td><td>WMAP 笔记，用于通过 Metasploit 运行 Web 漏洞扫描并审查发现的应用问题。</td><td><a href="/pages/cc945b88bfd5b14123e6a2372f6863614d0c3348">/pages/cc945b88bfd5b14123e6a2372f6863614d0c3348</a></td></tr><tr><td><h3><i class="fa-globe" style="color:$primary;">:globe:</i></h3></td><td><h4>Web 侦察与绕过资源</h4></td><td>用于模糊测试、指纹识别、载荷参考、WAF 检测、WAF 绕过以及 HackTricks Web 实用工具的 Web 侦察与绕过资源。</td><td><a href="/pages/9e01b869643b5c9ed6669b5cb8868b3123cd62ef">/pages/9e01b869643b5c9ed6669b5cb8868b3123cd62ef</a></td></tr></tbody></table>

### 工作流程

1. 在执行更重的检查之前，先对应用进行指纹识别并发现隐藏内容。
2. 在 Burp Suite 中捕获具有代表性的请求，并手动确认参数行为。
3. 只有当目标行为支持该测试路径时，才使用 SQLMap 或 WMAP。
4. 在专门的资源页面中研究载荷、绕过方法和 WAF 行为。
5. 为报告保留精确的请求、载荷、响应、截图和工具版本。


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://hacking-notes.jord4n.pro/zh/hacking-tools/web.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.