Wapiti is a web application vulnerability scanner. It will scan the web pages of a deployed web application and will fuzz the URL parameters and forms to find common web vulnerabilities.
You can download it from the following link: https://packetstormsecurity.com/files/download/147600/wapiti3-3.0.1.tar.gz
Source: https://packetstormsecurity.com/files/147600/Wapiti-Web-Application-Vulnerability-Scanner-3.0.1.html