w3af is a web application attack and audit framework. It's got three kinds of plugins; discovery, audit and assault that talk to each other for virtually any vulnerabilities in site, for instance a discovery plugin in w3af appears to be for various url’s to check for vulnerabilities and fo