Website vulnerability testing

What software tools are good for testing for sql injection vulnerabilities,etc…?
Are any of them open-source?
Are they installed on the site or run from the desktop?

Thank you
E