How to test applications

Nikto

Sitewatch or Wapiti

OpenVAS