1

since I have different projects, with different development environments, it is of course important for me which penetration tools I use.

The projects:

Project 1 is a pure web project which is only used by one customer. (vulnerability scanner?)

Project 2 is a pure web project, with internet connection (vulnerability scanner?)

Project 3 an old "bone" based on Java swing

It would be important to me:

  • Can be easily integrated into a CI job
  • The tool has a good test environment with many ready-made options (OpenVAS has a database of 25000 here)
  • Always up to date
  • Preferably open source

Especially the last project which operates in the environment of Java Swing makes me accordingly concern to test this accordingly also over pen test on security gaps.

Do you have corresponding experiences:

  • opensource solutions
  • Integration into an agile test process
  • Good to very good results in the area of ​​vulnerability scanning
  • I think this question is better asked on security.stackexchange.com. I think penetration testing is a very specific testing niche, it kinda feels offtopic here and better suited to be answered by security experts. – Niels van Reijmersdal Apr 24 at 17:43

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.