前言
openvas
Nessus, OpenVAS and Nexpose VS Metasploitable
http://en.wikipedia.org/wiki/Nessus_%28software%29
http://blog.cloudfence.cn/257.html
http://hackertarget.com/nessus-openvas-nexpose-vs-metasploitable/
http://yniewu.blogspot.com/
http://kaoticcreations.blogspot.com/p/sql-injection-waf-bypassing.html
IronWASP
http://www.newrelic.com/
http://www.cioage.com/saas/
http://www.freebuf.com/tools/11985.html
http://blog.ironwasp.org/2013/08/whats-new-in-ironwasp-v0965.html
http://www.cirt.net/
http://blog.orange.tw/
http://w3af.org/
https://help.ubuntu.com/community/InstallingSecurityTools