3

I tried scanning my web application built with AngularJS front-end and PHP backend. But scanning with scanners like Nessus and Websecurify fails due to '#' in URL. My URL has format

http://domain.com/webapp/index.php/base#controller/function

Anyone can suggest a good vulnerability scanner for scanning AngularJS web application?

1

Have you looked at AppCheck-NG? Their scanner is purpose built for detecting and reporting on web application vulnerabilities.

  • Thanks. Let me try it. – Harikrishnan Jun 14 '16 at 11:44
1

Here are some recommendations and a general overview of what we have used in the past and how we found their performance.

Burp Suite: Their new JS scanner just got a whole lot better, and can handle this now

OWASP ZAP: Has an AJAX spider that's been OK to use

ESLint: Has some angular rules that can be found from the link

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.