Skipfish web application security tool from Google (code.google.com)