Web Application Assessment Tools :

Paros Proxy

Absinthe

Achilles

SpikeProxy

SWAAT

WebSleuth

WebScarab

Security Compass Web Application Analysis Tool - SWAAT
http://www.securitycompass.com/swaat/swaat.zip

Oedipus - Open Source Web Application Security Analysis
http://oedipus.rubyforge.org/downloads.html

eEye Binary Diffing Suite (EBDS)
http://research.eeye.com/html/Tools/download/DiffingSuiteSetup.exe

SpikeSource Spike PHP Security Audit Tool
http://developer.spikesource.com/projects/phpsecaudit

Sprajax - An Open Source AJAX Security Scanner
http://www.denimgroup.com/Sprajax/Sprajax_Version_0_03.zip

Wapiti - Web Application Scanner / Black-box testing
http://wapiti.sourceforge.net/



[Ref:]
Academic Papers in Web Application Security
http://suif.stanford.edu/~livshits/work/griffin/lit.html