具)、Wireshark(数据包分析器)、Metasploit(渗透测试框架)、John the Ripper(密码破解器](英语:Passwordcracking))、sqlmap(自动SQL注入和数据库接管工具)、Aircrack-ng(用于渗透测试无线局域网的软件套件)、Burp suite以及OWASP
of password entropy does not match up with real world password usage or passwordcracking attacks. Robert McMillan. The Man Who Wrote Those Password Rules