MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an Exchange administrator to search the mailboxes of every user in a domain.

For more information check out this blog post.

An experiment of mine where I built a wireless honeypot using weak encryption so potential attackers could break in with ease.  I then had a series of honeypots set up on the network to track the intruder and find more out about them.
I built a lockpicking practice station to practice my lockpicking skills on.  An important part of any physical penetration test is lockpicking and being able to exploit vulnerabilities in hardware.