Skip to content

Instantly share code, notes, and snippets.

@nani1337

nani1337/Fortify Simple commands

Last active August 19, 2023 13:16
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save nani1337/d3295499896a341ac944af0b2da9f96b to your computer and use it in GitHub Desktop.
Save nani1337/d3295499896a341ac944af0b2da9f96b to your computer and use it in GitHub Desktop.
Download ZIP
Raw
Fortify Simple commands
Step#1 (clean cache)
>sourceanalyzer -b xvwa -clean
Step#2 (translate source code to byte code)
>sourceanalyzer -Xmx2500M -Xms2500M -64 -verbose -b xvwa -cp **/*.jar **/*.php
Step#3 (scan with rulepack, custom rules, filters, etc)
>>sourceanalyzer -b xvwa -scan -f wvwa.fpr
Step#4 Generate PDF from the FPR file (if required)
ReportGenerator -format pdf -f '9999.pdf' -source '/wvwa.fpr/' (fpr path)
Merging Fprs
C:\Program Files\HPE_Security\Fortify_SCA_and_Apps_17.20\bin
fprutility -merge -project <old.fpr> -source <new.fpr> -f <merged.fpr>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment