Integrating Acunetix with Mantis

Integrating Acunetix with Mantis is a 4-step process:

  • Create a project in Mantis (or use a pre-existing project)
  • Prepare an API Token in Mantis for communication with Acunetix
  • Configuring Acunetix for Integration
  • Configuring a Target to Report Issues to your Issue Tracker
  • Submitting Vulnerabilities to Mantis

πŸ” Integrating Acunetix with Mantis - Prerequisites

Before you can successfully integrate Acunetix with Mantis, you will need to have completed some preparation beforehand:

  • you should already have a Mantis account
  • you should already have created a project - typically this would contain bug reports or issues for the Target Web Application
  • you should already have created an API Token to secure the communication channel between Acunetix and Mantis
  • if you are using Acunetix Online, you should ensure that your Mantis system allows incoming API requests from online.acunetix.com

Prepare your Mantis account for Integration

If you already have a project in Mantis which you want to use to hold issues generated by Acunetix scans, then you can skip to creating an API token.

Create a Project

  • From your Mantis sidebar menu, select "Manage"
  • Click on the "Manage Projects" tab

  • In the "Projects" panel, click on the "Create New Project" button

  • In the "Add Project" panel:
  • Enter a "Project Name" for the project
  • Enter a description for the project
  • In the case of this example, you would leave the other fields at their default values
  • Click the "Add Project" button

Create an API Token for Acunetix Integration authentication

  • From your Mantis profile dropdown, select "My Account"
  • Click on the "API Tokens" tab

  • In the "Create API Token" panel:
  • Set the "Token Name" field to "Acunetix Integration" – this is only a friendly name to remind you of its use
  • Click the "Create API Token" button

  • Make sure you keep a copy of the Token - it cannot be retrieved after you exit the page. If you lose the Token, you will need to create a new one and repeat the process.

Configuring Acunetix for Integration

πŸ” Integrating Acunetix with Mantis - Prerequisites

Before you can successfully integrate Acunetix with Mantis, you will need to have completed some preparation beforehand:

  • you should already have a project - typically this would contain the issues for the Target Web Application
  • you should already have created an API Token to secure the communication channel between Acuneti and Mantis for your Target's project

  • In the Acunetix UI, click on "Issue Trackers" in the sidebar
  • Click on the "Add Issue Tracker" button

  • Set the "Name" field to describe the integration – for this example, we have used "Mantis Issues"

  • Select the Target Groups which will have access to this issue tracker configuration

  • Select the proxy settings which will be used to communicate with this issue tracker:

  • Use the CustomΒ setting to use proxy settings specifically for communicating with this issue tracker. Specify the protocol, proxy address and port and optionally username and password to be used to connect to the proxy server.

  • Select "Mantis" from the dropdown labelled "Platform"
  • Set the URL to the base URL for your Mantis deployment β€” in this example "http://tools.example.local/mantisbt"
  • Insert your Mantis API Token into the "Token" field
  • Click on "Test Connection" - you should receive a "Connection is Successful" message; also, the "Project and Issue Type" panel will be updated with your list of Projects

  • Select the Mantis project you want the integration to be linked to – in this example you would be using the pre-created "internal-wiki" project
  • Click the "Save" button at the top of the "Add Issue Tracker" panel

Configuring a Target to Report Issues to your Issue Tracker

From your list of Targets, select the Target you wish to work with.

  • In the Target Information panel, scroll to the bottom of the panel and expand the "Advanced" link.

  • Enable the "Issue Tracker" slider
  • From the "Issue Tracker" dropdown, select the name of the Mantis Integration configuration you wish to use
  • At the top of the "Target Information" panel, click the "Save" button

Now that your Target is configured to link to Mantis, you need to Scan your Target. When the Scan is completed, you will be able to select the Vulnerabilities to submit to your Issue Tracker.

Submitting Vulnerabilities to Mantis

Once you have completed a Scan on your Target:

  • Select "Vulnerabilities" in the sidebar

  • Adjust your filter to obtain a shortlist containing the vulnerabilities you wish to send to your Issue Tracker
  • Use the checkboxes next to vulnerability to select the vulnerabilities to send to the Issue Tracker
  • Click the "Send to Issue Tracker" button at the top of the "Vulnerabilities" panel

Check your Mantis Issues page

Your Mantis Issues page will show the issues you have submitted to the Issue Tracker:

 

Β« Back to the Acunetix Support Page