OWASP Zed Attack Proxy (ZAP) integrated penetration testing tool for finding vulnerabilities in web applications https://code.google.com/p/zaproxy