Open Source Web App Security Testing Tools – On The Web

Burp – Not OSS, but has free version
Grendel Scan – Java based
Pantera – Python based
Paros – Java based
Proxmon – Python based
RatProxy – Ajax testing
WebScarab – Java based