I tried scanning my web application built with AngularJS front-end and PHP backend. But scanning with scanners like Nessus and Websecurify fails due to '#' in URL. My URL has format

http://domain.com/webapp/index.php/base#controller/function

Anyone can suggest a good vulnerability scanner for scanning AngularJS web application?