Security tool for web application

I am new to security testing . What should be the best approach to test the web applications security vulnerabilities. I need to cover below scenarios in security Testing:

1. Static Analysis
2. Dynamic Analysis
3. Authentication and Session Management
4. Network Communication
5. Check for client side injection (XSS).
6. Username enumeration
7. SQL injection
8. Malicious file upload.
9. Check for session management (cookie flaws, session overriding, session fixation etc.).

Please share the information and if anybody knows any tools to be use to achieve the same.