w3af: web application attack and audit framework, the open source web vulnerability scanner.
https://github.com/andresriancho/w3af.git
latest