PyPwn is a brand new web exploitation script, supports xss, and sql(i).