w3af is an online application attack and audit framework. It's got 3 different types of plugins; discovery, audit and assault that communicate with each other for any vulnerabilities in website, for instance a discovery plugin in w3af seems to be for different url’s to test for vulnerabilities and forward it into the audit plugin which then uses