their are tons of applications for vulnbility identification. ^ alota users have fillied with you replies on tools . but if I was you & if I cant be loud on the system . Im just gonna use a spide the system using a spider and manually identifies the vulns. not that hard not won't be much loud . using tools is all good . but in like data submition forms . some submit values and see whats reply they get . that might get annoyed . just my idea