Firefox’s appsec add-ons make it a useful tool for new pen testers who can’t afford professional tools.

Burp Suite’s Intruder tool can be used to automate testing for weak/default passwords.