Get started with these links...
https://ironwasp.org/ https://dineshramitc.wordpress.com/2015/02/07/security-test-automation-using-selenium-and-zap/ http://linkeshkannavelu.com/2015/01/08/security-test-automation-using-selenium-and-zap/
http://www.opensourcetesting.org/security.php
http://www.metasploit.com/ - Commercial tool
https://skillsmatter.com/skillscasts/5015-security-testing-with-owasp-zap-from-zero-to-hero
https://www.owasp.org/index.php/Appendix_A:_Testing_Tools
http://www.continuumsecurity.net/bdd-intro.html
Online tools https://asafaweb.com/ Scanner for ASP.net sites