In a controlled, authorized penetration test, security professionals may use the following tools to test for session hijacking vulnerabilities: