The Offensive Manual Web Application Penetration Testing Framework.
Software for fuzzing, used on web application pentestings.
CapFuzz - capture, fuzz & intercept web traffic.