Penetration Testing Tools
• SEI Report
Publisher
Software Engineering Institute
Abstract
This article provides a primer on the most commonly used tools for traditional penetration testing. (A related article provides an overview of penetration testing practices.) Although some tools are listed by name, these are merely intended to serve as examples of particular types of tools. The list is in no way intended to be comprehensive and should not be interpreted as an endorsement of the tools listed.
That said, we start by looking at the most common tool types, port scanners and vulnerability scanners. Examples in the open source and commercial communities are provided for each, where appropriate.
Next, we delve into the state of the commercial practice with regards to tool usage and how penetration testing services are provided. We then make a series of recommendations for selecting the right toolkit for the job and for training one’s testers in penetration testing and the tools used.
Cite This SEI Report
Van Wyk, K. (2007, January 18). Penetration Testing Tools. Retrieved August 16, 2026, from https://www.sei.cmu.edu/library/penetration-testing-tools/.
@techreport{van_wyk_2007,
author={Van Wyk, Ken },
title={Penetration Testing Tools},
month={Jan},
year={2007},
institution={Software Engineering Institute, Carnegie Mellon University},
url={https://www.sei.cmu.edu/library/penetration-testing-tools/},
note={Accessed: 2026-Aug-16}
}
Van Wyk, Ken . "Penetration Testing Tools." Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, January 18, 2007. https://www.sei.cmu.edu/library/penetration-testing-tools/.
K. Van Wyk, "Penetration Testing Tools," Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, 18-Jan-2007 [Online]. Available: https://www.sei.cmu.edu/library/penetration-testing-tools/. [Accessed: 16-Aug-2026].
Van Wyk, Ken . "Penetration Testing Tools." Software Engineering Institute, Carnegie Mellon University, Software Engineering Institute, 18 Jan. 2007. https://www.sei.cmu.edu/library/penetration-testing-tools/. Accessed 16 Aug. 2026.
Van Wyk, Ken . Penetration Testing Tools. Software Engineering Institute. 2007. https://www.sei.cmu.edu/library/penetration-testing-tools/