Wapiti is a web application vulnerability scanner. It will scan the web pages of a deployed web application and will fuzz the URL parameters and forms to find common web vulnerabilities.
You can download it from the following link: https://packetstormsecurity.com/files/download/162603/wapiti3-3.0.5.zip
Source: https://packetstormsecurity.com/files/162603/Wapiti-Web-Application-Vulnerability-Scanner-3.0.5.html