Wapiti is a web application vulnerability scanner. It will scan the web pages of a deployed web application and will fuzz the URL parameters and forms to find common web vulnerabilities.
You can download it from the following link: https://packetstormsecurity.com/files/download/161497/wapiti3-3.0.4.tar.gz
Source: https://packetstormsecurity.com/files/161497/Wapiti-Web-Application-Vulnerability-Scanner-3.0.4.html