w3af is an internet application attack and audit framework. It's got a few sorts of plugins; discovery, audit and assault that communicate with each other for any vulnerabilities in website, for example a discovery plugin in w3af seems to be for different url’s to test for vulnerabilities