I recently had the time to test Google’s Skipfish. It is a fully automated penetration testing tool and was just published some weeks ago. More here

Tools like Nessus and Nmap are indispensable when it comes down to security assessment and penetration testing. Many researchers have to rely on those tools in order to find weaknesses in websites/web apps.