12 Top Pentesting Tools for Offensive Security Pros

Bishop Fox's 2024 pentest tool roundup spans networks, cloud, APIs and LLMs: community favorites like Certipy, Freeway, BloodHound and Impacket, with notes on why the team relies on each.

Bishop Fox consultants name the pen testing tools they're most thankful for in 2019 — TKO-SUBs, BloodHound, Impacket, and Frida among them — with use cases and install notes.

Guide to web app pentesting: the standard testing steps, then seven tools—Netlas, Nmap, Arachni, W3af, Nessus, Burp Suite and SQLmap—with descriptions, pros/cons and usage examples.

NetSPI and Synack announced a KKR-backed merger combining nearly 40 years of offensive testing, arguing autonomous testing still needs human judgment to separate real risk from noise.

ADPathFinder extends BloodHound CE by unifying SharpHound with OpenGraph collectors, mapping privilege escalation paths across AD, ADCS, MSSQL, and SCCM plus context-aware password audits.

ForceHound is an open-source Python collector that renders Salesforce profiles, permission sets, and sharing rules as a BloodHound CE identity graph, bringing AD-style attack path analysis to CRM.