Traditionall webapps are often pentested by vulnerability scanners like Burp Suite, OWASP ZAP or with the other gazillion tools included in Kali. But what is the best way to pentest automatically a JavaScript web-app (AngularJS) with a REST backend? And what are the recommended tools for that task?

  • 1
    Is the question specifically about automated testing/scanning or are you asking about ways to pentest Angular apps in general?
    – jupenur
    Commented Nov 28, 2016 at 21:42
  • 1
    Please note that fully automated webapp pentests only find some very-low hanging fruits. Any serious pentest goes way further than that.
    – niilzon
    Commented Mar 31, 2017 at 13:15

1 Answer 1


For Angular.JS, there is a very handy tool Batarang Chrome Extension in the Chrome Extension Store:


For testing REST you can still use Burp, Fiddler or ZAP.

Here is a link to REST OWASP cheat sheet: https://www.owasp.org/index.php/REST_Security_Cheat_Sheet

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .