w3af

w3af: web application attack and audit framework, the open source web vulnerability scanner.