NAVEX: Precise and scalable exploit generation for dynamic web applications

Skipfish and wapiti are quite a bit different than this. They are simply blackbox scanners that attempt to crawl a webpage and look for common issues, mostly by trial and error. This is examining the source code of an application, finding all the sinks, building a graph, and working backwards through the graph to find sources that can pass input to the vulnerable sinks.

Shameless plug scanner.secapps.com - tests are executed in your browser.

I get a blank page with a couple of console errors when I visit that URL (Safari on OS X)

Edit: Not sure why I'm getting downvoted -- the parent tool sounded interesting, but I get a blank page and these errors on the console https://gist.github.com/tingletech/153118cb3078fe2667a3874f0...

Looks like it is intended to work in FF and Chrome only [1] judging by its extension.

1: https://secapps.com/extension

Yes. There is currently pretty poor support for Safari and specifically IE but we are working on it.

Far for being the same, did you read the article? It’s not a simple vuln scanner