w3af is an internet application attack and audit framework. It has 3 forms of plugins; discovery, audit and assault that communicate with one another for almost any vulnerabilities in web page, for example a discovery plugin in w3af looks for various url’s to test for vulnerabilities and forward it into the audit plugin which then takes advantage