I am working on a Web platform that must-need-should have a good level of security.
Therefore, I am interested in a good quality tool to test my Web platform QA on security.
My main programming skill is Java.
Is there a really good and open source tool for the website scanning e.g. OWASP, auto cookie check's and similar things. Ideally written in Java(need to be able to customise it)
Looking forward to hear your suggestions,