Windows Penetration testing tools

1. Links for checking vulnerability of the website.
    https://www.hackingloops.com/top-12-windows-penetration-testing-tools/
    https://nmap.org/
    https://www.wireshark.org/download.html
    https://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html
    http://sqlmap.org/
    https://www.metasploit.com/
    https://portswigger.net/burp/
    https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project#tab=Main
    https://www.tenable.com/products/nessus-vulnerability-scanner
    http://www.cirt.net/nikto2
    http://www.openwall.com/john/
    https://www.thc.org/thc-hydra/
    http://www.wtcs.org/snmp4tpc/getif.htm
    https://www.charlesproxy.com/
    http://robmzd.blogspot.in/2010/12/penetration-test-checklist.html
    https://subgraph.com/vega/

2. How to secure website from session hijecking.
    https://www.codeproject.com/Articles/859579/Hack-proof-your-asp-net-applications-from-Session

3. Request Object sent by client machine browser to server machine.
    Request Object
    https://stackoverflow.com/questions/866980/how-do-you-get-the-ip-address-from-a-request-in-asp-net
    https://www.w3schools.com/asp/coll_servervariables.asp
    http://www.dotnetspider.com/tutorials/AspNet-Tutorial-35.aspx
    http://www.dotnetfunda.com/articles/show/79/useful-properties-of-request-object-in-aspnet

4. Remove http unwanted response header
    https://blogs.msdn.microsoft.com/varunm/2013/04/23/remove-unwanted-http-response-headers/

5. Application has set cache controls attribute to private.
It is recommended to set the Cache control attributes to no-cache and no-store.
    https://stackoverflow.com/questions/6625152/setting-cache-control-header