http://w3af.org/ - w3af is a Web Application Attack and Audit Framework.

http://sourceforge.net/projects/rips-scanner/

https://code.google.com/p/fuzzdb/