OWASP ZAP

ZAP is a tool for finding vulnerabilities in web applications.
It is a Dynamic Application Securing Tool (DAST) which attacks the target application in a similar way to a malicious attacker.

Have a look at the Contributing Guide: https://www.zaproxy.org/docs/contribute/