What tools should I look into and what ways can I start improving security testing?