> For the complete documentation index, see [llms.txt](https://hacking-notes.jord4n.pro/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://hacking-notes.jord4n.pro/zh/hacking-tools/web.md).

# Web 应用测试工具

用于代理工作流、SQL 注入自动化、Web 漏洞扫描、模糊测试、分析、载荷研究和 WAF 绕过支持的 Web 应用测试工具与资源。

将此类别用于 Web 应用测试工作流：代理流量、验证注入点、扫描 Web 模块、发现隐藏内容、分析技术栈、研究载荷，以及查看 WAF 行为。

## 工具与资源

<table data-view="cards" data-full-width="false" data-search="false"><thead><tr><th></th><th></th><th></th><th data-hidden data-card-target data-type="content-ref"></th></tr></thead><tbody><tr><td><h3><i class="fa-bug" style="color:$primary;">:bug:</i></h3></td><td><h4>Burp Suite</h4></td><td>Burp Suite Web 渗透测试笔记，涵盖 Proxy 拦截、Repeater 验证、Intruder 自动化、Comparer 分析、HTTP 请求操作、载荷测试、身份验证测试、漏洞确认和证据收集。</td><td><a href="/zh/hacking-tools/web/burpsuite.md">Burp Suite</a></td></tr><tr><td><h3><i class="fa-database" style="color:$primary;">:database:</i></h3></td><td><h4>SQLMap</h4></td><td>SQLMap 渗透测试笔记，涵盖 SQL 注入检测、DBMS 指纹识别、数据库枚举、表和列发现、数据导出、基于 Cookie 的测试、风险与级别调优、OS Shell 工作流、SQLite 测试以及手动 SQL 注入验证。</td><td><a href="/zh/hacking-tools/web/sqlmap.md">SQLMap</a></td></tr><tr><td><h3><i class="fa-shield-halved" style="color:$primary;">:shield-halved:</i></h3></td><td><h4>PHP 安全扫描器</h4></td><td>仅限订阅者的 PHP 静态分析工作流，涵盖危险函数、源到汇审查、不安全配置、上传风险、反序列化、SSRF 和权限提升迹象。</td><td><a href="/zh/hacking-tools/web/php-security-scanner.md">PHP 安全扫描器</a></td></tr><tr><td><h3><i class="fa-globe" style="color:$primary;">:globe:</i></h3></td><td><h4>WMAP</h4></td><td>通过 Metasploit 运行 Web 漏洞扫描并审查发现的应用问题的 WMAP 笔记。</td><td><a href="/zh/hacking-tools/web/wmap-scan-web-vulnerabilities.md">WMAP Web 漏洞扫描</a></td></tr><tr><td><h3><i class="fa-globe" style="color:$primary;">:globe:</i></h3></td><td><h4>Web 侦察与绕过资源</h4></td><td>用于模糊测试、指纹识别、载荷参考、WAF 检测、WAF 绕过以及 HackTricks Web 工具的 Web 侦察与绕过资源。</td><td><a href="/zh/hacking-tools/web/web-recon-and-bypass-resources.md">Web 侦察与绕过资源</a></td></tr></tbody></table>

### 工作流

1. 在执行更重的检查之前，对应用进行指纹识别并发现隐藏内容。
2. 在 Burp Suite 中捕获具有代表性的请求，并手动确认参数行为。
3. 仅当目标行为支持该测试路径时，才使用 SQLMap 或 WMAP。
4. 在专门的资源页面中研究载荷、绕过方法和 WAF 行为。
5. 保留精确的请求、载荷、响应、截图和工具版本，用于报告。


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://hacking-notes.jord4n.pro/zh/hacking-tools/web.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.