There are good software like Acunetix which can do a pretty well job. Basically it tests common hacking technics like sql injection and cross scripting, then generating a report of the issues if there are any. But is quite expensive.
solved What is the best way to test a node.js web server for security issues? [closed]