w3af, is a Web Application Attack and Audit Framework. w3af core and it’s plugins are are fully written in python. The project has more than 125 plugins, which check for sql injection, cross site scripting (xss), remote file inclusion and more.

• » Download:
  Windows Mac Linux