Webinspect is an automated web application security scanning tool from HP. It helps the security professionals to assess the potential vulnerabilities in the web application. It is basically a dynamic black box testing tool which detects the vulnerabilities by actually performing the attack. Today we will see how to install HP Webinspect in Windows.
We will be installing it on Windows 10. HP Webinspect requires SQL server to be installed on the system. So first install SQL server express on Windows as shown here. After SQL server is installed successfully, download the latest version of HP Webinspect from their website. We will use version 16.10 for this howto. Right click on the downloaded file and run with administrator privileges.
The installation wizard will start with the welcome message as shown below. Click on”Next”.
Accept the license agreement and click on “Next”.
You can change the installation folder if you want although keeping it default will not hurt. Click on “Next”.
If you want to setup Webinspect as a sensor, select the option and click on “Next”.
Click on “Install” to start installation process.
Once the installation is over, it will show you the below window. If you want to start HP webinspect, select the option and click on “Finish”.
The program will launch as shown below.
If you get something like below, you have no SQL server installed on your system. Install SQL server express and launch the program again.
The program will prompt you for activation as shown below. The program also offers 15 days trial. I am registering for the trial.
Once the registration process is over, the program will open as shown below. Update the program. In our next howto, We will see how to perform web app pentesting with HP Webinspect. Until then, Happy Weekend.