OWASP ZAP (Zed Attack Proxy) is specifically designed for testing web applications and includes features to identify a variety of vulnerabilities including injections and other common web application vulnerabilities. Nessus, while a robust vulnerability scanner, is better suited for more general network security assessments rather than specialized web application vulnerabilities. Acunetix is another web application scanner, yet it is not among the provided options. Nmap is primarily a network discovery and security auditing tool used for network scanning and enumeration rather than testing web applications for the vulnerabilities listed.