title: Penetration testing tools
body: <p>We have hundreds of websites which were developed in asp, .net and java and we are paying lot of money for an external agency to do a penetration testing for our sites to check for security loopholes. 
  Are there any (good) software (paid or free) to do this? </p>
  
  <p>or.. are there any technical articles which can help me develop this tool?</p>