Some good Web vulnerability scanning modules in Metasploit