The Web Application Attack and Audit Framework (w3af) is a web application vulnerability scanner. It is probably the most complete vulnerability scanner included in Kali Linux.
