Tools developed by Instituto para la Seguridad en Internet:

HTTPCracker 1.0
HTTPCracker 1.0 is a plugin for WebSleuth to analyze the security of forms based authentication in web sites. It reads a list of user names from a file and for each user name tries to log in using every password defined in the password list file. In order to improve the functionality of this plugin, password list files can include special syntax allowing for a more powerful generation of candidate passwords. Many sockets can be run in paralell to speed up the analysis.
[>> Download]

WASAT v1.0 beta
Web Authentication Security Analysis Tool is a Win32 application designed for the assessment of the security of different Web related authentication schemes, namely Basic Authentication and Forms-Based Authentication. WASAT is able to mount dictionary and brute force attacks of varying complexity against the target Web site. Password files can be easily configured to perform exhaustive searches. In order to improve speed, some different tricks and variations have been implemented.
[>> Download]