Attacking Web Applications

Acunetix Vulnerability Scanner - audits a web site's security. [Free Trial/Paid-Windows]

ModSecurity - web application firewall for Apache and Nginx. [Free-Linux, Windows]

Netsparker - web application security scanner. [Demo/Paid-Windows]