LiLith is a tool written in Perl to audit web applications. This tool analyses webpages and looks for html

tags , which often refer to dynamic pages that might be subject to SQL injection or other flaws.

It works as an ordinary spider and analyses pages, following hyperlinks, injecting special characters that have a special meaning to any underlying platform.

Any Web applications scanner can never perform a full 100% correct audit. Therefore, a manual re-check is necesarry. Hence, be aware that Lilith might come up with several false positives.

Download | Source