Summary

In this chapter, we've covered tools and methodologies beyond those we used directly in our walkthroughs. We've also discussed a process for evaluating new tools, and an example applying that analysis to Burp Suite Pro and SecApps within the context of the pentesting engagements we've explored throughout the book. By now, you've seen an expanded overview of different types of scanners (application, network, and OSINT), community databases of attack patterns, source code analysis tools, new Burp extensions and workflows, the value of exploitation frameworks, and more. This should broaden your horizon of understanding beyond this book and provide the basis for your continued development as a security researcher.