What are the most exciting new penetration testing tools?

One unique aspect of Nmap 7.90's integration of the ZMap tool is its unparalleled capability to swiftly survey vast expanses of the internet landscape. This integration empowers users with the ability to conduct comprehensive network reconnaissance at an unprecedented speed, enabling them to efficiently identify potential vulnerabilities and emerging threats across the global network infrastructure.

Nmap is a powerful network scanning tool that can discover hosts, ports, services, operating systems, and vulnerabilities on any network. The latest version, 7.90, introduced several new features, making it even more versatile and effective for penetration testing.

It's easy to get overwhelmed by all of BloodHound's option for Active Directory mapping, but it is an incredibly powerful (and easy to use!) tool that takes a lot of the guess work out of identifying links between accounts and domains. It also identifies things you may have missed! Taking a look through the documentation and reading a few Medium write ups is just enough to get any beginner started.

Currently, the bloodhound 4.3.1, includes many improvements over 4.0 such as completely rewritten parts of the program for stability, and future ease of working. One of the main modules to get refactored was AzureHound with new post-processing logic and new Azure edges.

BloodHound is a graph-based security tool that helps visualize and analyze Active Directory environments. It can identify critical assets, identify vulnerabilities, and simulate attacks to assess an organization's security posture. Version 4.0 introduced several new features and improvements, making it even more valuable for security professionals.

CrackMapExec is a post-exploitation tool that allows attackers to move laterally within a network and escalate privileges. It can be used to identify vulnerable systems, exploit known vulnerabilities, and gain unauthorized access to sensitive data. Version 5.1 introduced new features and improvements to enhance its capabilities.

Currently CrackMapExec 5.4 offers many new modules, speed improvements and compatibilities over the CrackMapExec 5.1. While there were too many modules added to list them here, here is some of them to name a few: keepass discovery, MS17-010 module as well as added new shiny RDP protocol

Ghidra added many new shiny features from 9.2 to 10.3.3 (current release). Finally, after long time coming, we have received a dark theme to our favorite reverse engineering toolkit. There were also very important changes and compatibility additions to the Debugger as well as the Decompiler.

Ghidra is a free and open-source software reverse engineering tool developed by the National Security Agency (NSA). It can be used to analyze malware, firmware, and other binary files. Version 9.2 introduced several new features and improvements, making it a valuable tool for security researchers and penetration testers.

Burp Suite is a comprehensive web application security testing platform that includes a variety of tools for identifying and exploiting vulnerabilities. Version 2020.12 introduced new features and improvements, making it even more effective for web application security testing.

Actually, the newest version of Burp Suite is 2023.8. It seems like most of the changes are improvements to daily usability such as various scan indicators, but also added bigger support to race conditions. It seems like Portswigger is trying to push this attack method into a wider audience since it is still quite complicated to execute this attack so its nice to see. You can now also open safely unknown Burp projects, since Burp Suite will disable certain sensitive settings once you mark the project as untrusted.

This suggestion ssems to be outdated. The current release is 2024.1. It comes with various small improvements and bigger ones, such as the new Insertion points panel and improved GraphQL functionality.