Skipfish

10 open source tools that feel illegal...

Fireship

Web application vulnerability scanner; crawls sites and reports issues like XSS and SQL injection.