w3af - Web Application Attack and Audit Framework

w3af, is a Web Application Attack and Audit Framework. The w3af core and it's plugins are fully written in python. The project has more than 130 plugins, which check for SQL injection, cross site scripting (xss), local and remote file inclusion and much

Download w3af's latest version! (40.0 MB)
Download other versions from here

Source-
http://sourceforge.net/projects/w3af/

Screenshot of w3af Graphical User Interface -