News for hackers. Stuff that matters.

A comment on Ask HN: How do you become productive in a new project as a senior developer?. Parent comment

Re:Ask HN: How do you become productive in a new project as ... by Jedi72 on Tuesday May 23, 2017 @02:43AM (#14399282)
Also I'm assuming this is a web app but taking over a live project is a bit like getting handed a gun, you should check if it's loaded before handling it ;) at the least run a vulnerability scanner over your app to look for security issues
[ Parent | on HN ]
Re:Ask HN: How do you become productive in a new project as ... by kovek on Tuesday May 23, 2017 @04:50AM (#14399826)
What are some examples of vulnerability scanners you are thinking of?
[ Parent | on HN ]
Re:Ask HN: How do you become productive in a new project as ... by OliverJones on Tuesday May 23, 2017 @05:56AM (#14400039)
Burp scan, zap scan are two products for penetration testing / vulnerability scans. They mount organized attacks on your web site. They look for stuff like sql injection and xsrf, and all that.

Burp has a broader scope because it does fuzz-style random testing. Zap is more reproducible. (Burp can be a pain in the neck because it doesn't reliably retest stuff it found.)

Be gentle with your new developer colleagues as you present them the results from these tools. They almost always find a couple of more-or-less silly vulnerabilities.

[ Parent | on HN ]