wapiti

Web application vulnerability scanner (Kali). Authorized testing only.

$ wapiti -u https://example.com
$ wapiti -u https://example.com -m sql,xss,exec
$ wapiti -u https://example.com -f html -o report/