Burp Suite's web vulnerability scanner
What's the difference between Pro and Enterprise Edition?
Download the latest version of Burp Suite.
Karl Dawson has written a nice paper about using Burp Intruder for discovering login credentials, and how you can use various tricks to reveal other useful information and anomalies, as well as actually guessing valid passwords. Download it here.