w3af Web Application Attack and Audit Framework 1.0

w3af, is a Web Application Attack and Audit Framework. The w3af core and it’s plugins are fully written in python. The project has more than 130 plugins, which check for SQL injection, cross site scripting (xss), local and remote file inclusion and much more.

Source: w3af Web Application Attack and Audit Framework 1.0