I tried scanning my web application built with AngularJS front-end and PHP backend. But scanning with scanners like Nessus and Websecurify fails due to '#' in URL. My URL has format
http://domain.com/webapp/index.php/base#controller/function
Anyone can suggest a good vulnerability scanner for scanning AngularJS web application?
Have you looked at AppCheck-NG? Their scanner is purpose built for detecting and reporting on web application vulnerabilities.
Here are some recommendations and a general overview of what we have used in the past and how we found their performance.
Burp Suite: Their new JS scanner just got a whole lot better, and can handle this now
OWASP ZAP: Has an AJAX spider that's been OK to use
ESLint: Has some angular rules that can be found from the link
