Cobalt Strike - Advanced threat tactics for penetration testers.

mimikatz - It's well known to extract plaintexts passwords, hash, PIN code and kerberos tickets from memory. mimikatz can also perform pass-the-hash, pass-the-ticket, build Golden tickets, play with certificates or private keys, vault... maybe make coffee?

ZoomEye - Network mapping service

Rapid7 - Find security issues, verify vulnerability mitigations & manage security assessments with Metasploit. Get the world's best penetration testing software now. DownloadPen testing software to act like an attacker.

Armitage - Armitage makes penetration testing easy by adding a GUI to the Metasploit framework

Immunity CANVAS - Immunity's CANVAS makes available hundreds of exploits, an automated exploitation system, and a...