I've built a poll from the last eight Toolsmith Tools of the Year to help you decide, and it's a hell of a list.
- @Mandiant's Memoryze (2008)
- @Paterva's Maltego (2009)
- @SANSForensics' SIFT (2010)
- @zaproxy and @psiinon's OWASP Zed Attack Proxy (2011)
- @Modsecurity and @IvanRistic's Modsecurity for IIS (2012)
- @LaNMaSteR53 Recon-ng (2013)
- @joshsokol's Simple Risk (2014)
- @beenuar Hook Analyser (2015)
You can vote in the poll to your right, it'll be open for two weeks.