...It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration testing. ZAP provides automated scanners as well as a set of tools that allow you to find security vulnerabilities manually. It stands between the tester’s browser and the web application so that it can intercept and inspect messages sent between browser and web application.
Java GUI-Less browser, supporting JavaScript, to run against web pages
A java GUI-Less browser, which allows high-level manipulation of web pages, such as filling forms and clicking links; just getPage(url), find a hyperlink, click() and you have all the HTML, JavaScript, and Ajax are automatically processed.
A commercially supported, open-source distribution of the popular web application test automation tool Selenium Remote Control. Built by the original author of the Selenium, Sauce RC is easy to install and has the latest fixes and browser support.