Security Tools for Testing web applications

https://developer.salesforce.com/page/Testing_CRUD_and_FLS_Enforcement

https://developer.salesforce.com/page/Enforcing_CRUD_and_FLS

https://developer.salesforce.com/page/Security_Tools

https://security.secure.force.com/security/tools/webapp/scanner/request

https://security.secure.force.com/security/tools/webapp/burptut

https://www.youtube.com/watch?v=iwndttXJDH