A tool for Continuous Integration pipeline integration that is designed to check for security issues in web applications. Wapiti (http://wapiti.sourceforge.net/) is the vulnerability scanner that SecTool currently supports.

##Dependencies

• virtualenv
• pip
• python 2.7+ / python 3.3+

##Install

###Development

virtualenv .env
source .env/bin/activate
pip3 install -r requirements.txt
python3 sectool.py ARGS

python3 sectool.py http://0.0.0.0:3000 [email protected] --checkers xss,sql,backup,file,exec --auth [email protected]%admin1234 --format json --plugins wapiti

This will run wapiti and return a report in json format.