An open source application scanning tool

:: 棱镜 X · 一体化的轻量型跨平台渗透系统

WARNING: This app contains security vulnerabilities. AltoroJ is a sample banking J2EE web application. It shows what happens when web applications are written with consideration of app functionality but not app security. It's a simple and uncluttered platform for demonstrating and learning more about real-life application security issues.

Integrate static security testing with HCL AppScan CodeSweep with Github.

Gradle plugin for integrating with HCL AppScan Source

A framework for interacting with HCL AppScan on Cloud and HCL AppScan Enterprise

Maven plugin for integrating with HCL AppScan Source

Maven plugin for integrating with HCL AppScan on Cloud

A service to help synchronize issues between HCL AppScan and other Issue Management systems

A sample application that can used to demonstrate the method-level annotation support in HCL AppScan static analysis

PyScan is an extension that lets you control AppScan through Python.

Scanning multiple URLs with AppScan Standard by reading URL in text file and excute scan in sequence.

An extension which allows the user to import a Burp file containing a list of requests into AppScan

Integrate static security testing with HCL AppScan on Cloud using GitHub Actions

An extension which enables to import into AppScan a text file containing a list of URLs.

Plugin for integrating HCL AppScan on Cloud (ASoC) scanning into GoCD pipelines

This is a linux docker image that uses python to download the SAClientUtil from HCL AppScan on Cloud and run static analysis against a build application in Bitbucket pipelines.

Batch Manage your ASoC to Invite, Delete users and scans

A GitHub Action for running DAST scans in AppScan on Cloud

HCL AppScan IFA Server Java client tool