New answers tagged open-source
One tool to checkout out is OWASP ZED Attack Proxy It has lot of different ways to test a site. ZED attack proxy has an excellent wiki and many different tools to scan a site. There are fuzz testing tools. Make sure you're testing a site you own but it will attempt to attack it with common attack vectors. Some things that I have found with doing my own scans ...
Top 50 recent answers are included