bscan

BScan is a configurable and extendable web application security scanner that can be run from a command line headless (without UI). It's built on top of arguably the most popular commercial security testing tool Burp Suite from PortSwigger and Buby from E. Monti and T. Duehr.

The major use cases and advantages can be summarized as follows:

1) Run security scans offline from a command line headless (without UI);

2) Change the type of scanning easily by changing configuration parameters;

3) Extend the BScan's functionality by adding external modules;

4) Utilize Burp's default spidering, active and passing scanning features;

5) Integrate scan with different sources of known injections (e.g. Google's fuzzdb: http://code.google.com/p/fuzzdb/);

6) Create comprehensive security regression tests suites from artifacts provided by security auditors and run them periodically from a command line;

7) Log found issues to a plain text file.

More info: http://gryb.info/bscan