w3af is a Web Application Attack and Audit Framework. The project's goal is to create a framework to find and exploit web application vulnerabilities that is easy to use and extend. The console app requires fpconst, pygoogle, nltk, SOAPpy, pyPdf, BeautifulSoup, PyOpenSSL, json-py, scapy, SocksiPy, and python-cluster. The graphical interface requires graphviz and xdot.