2

since I have different projects, with different development environments, it is, of course, important for me which penetration tools I use.

The projects:

Project 1 is a pure web project which is only used by one customer. (vulnerability scanner?)

Project 2 is a pure web project, with an internet connection (vulnerability scanner?)

Project 3 an old "bone" based on Java swing

It would be important to me:

  • Can be easily integrated into a CI job
  • The tool has a good test environment with many ready-made options (OpenVAS has a database of 25000 here)
  • Always up to date
  • Preferably open source

Especially the last project which operates in the environment of Java Swing makes me accordingly concern to test this accordingly also over pen test on security gaps.

Do you have corresponding experiences:

  • opensource solutions
  • Integration into an agile test process
  • Good to very good results in the area of ​​vulnerability scanning
Improve this question
3
  • 1
    I think this question is better asked on security.stackexchange.com. I think penetration testing is a very specific testing niche, it kinda feels offtopic here and better suited to be answered by security experts.
    – Niels van Reijmersdal
    Apr 24, 2019 at 17:43
  • 1
    Did you try bdd security
    – PDHide ♦
    Jun 20, 2019 at 14:34
  • No but intresting information
    – Mornon
    Jul 4, 2019 at 12:21

1 Answer 1

Reset to default
2

SonarQube:

Plus side:

  • OpenSource
  • Integratable into CI
  • Security hotsposts support Java (Swing), JS, VB, C#, Python, PHP
  • OWASP / SANS Security Reports

Down side:

  • Not a real penetration tester, but security linter
  • Security vulnerabilities support only Java, C#, PHP
Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.