Integrating Invicti Standard with Jenkins

This article explains how to run scans automatically and export reports from Invicti via Jenkins.

As Jenkins is a Windows service, none of the GUIs of any applications triggered by Jenkins will open. They will be launched in a background process.

How to Integrate Invicti Standard with Jenkins

1. Once you have installed Jenkins on your local machine, open the Jenkins web user interface. The Jenkins web interface can be reached at: http://127.0.0.1:8080/. This window is displayed: Click the Create a Job link.

2. In the Enter an item name field, type your project name.
3. Select Freestyle project as the type.

     4. Click OK. The Config window is displayed.

5. Click the Build Environment tab.
6. From the Add build step dropdown, select Execute Windows batch command. The Execute Windows batch command panel is displayed.

7. In the Command field, enter the following command:

cd C:\Program Files (x86)\Invicti
invicti.exe /a /url http://php.testsparker.com/ /rt "Detailed Scan Report" /r "C:\Users\CURRENT_USER\Documents\Invicti\Reports\report_phptestsparkercom.html"

In this command, the value 'Detailed Scan Report' given to the rt parameter on the command line, is taken from the template names contained in the C:\Users\{USERNAME}\Documents\Invicti\Resources\Report Templates directory.

If any of the template names from this screenshot were included in the command, instead of ''Detailed Scan Report", a report will be generated according that template instead.

For further information about the parameters you can use when running Invicti Standard via the command line, see Invicti Standard Command Line Interface and Arguments.

8. Click Save to save the project.
9. This screenshot shows a Console Output window after the created task runs.

This screenshot shows a Workspace that is created after the task runs.

If you run Jenkins as a Local System Account, Invicti saves files in the C:\Invicti folder. This will prohibit the Jenkins service from running properly. Instead, you need to run the Jenkins service as a User Account. This will enable Invicti to save the files under the C:\Documents\USER\Invicti folder.

How to Run Jenkins as a User Account

1. Click Windows and select Run. The Run dialog is displayed.
2. Type 'services.msc' into the textbox and press Enter. The Services window is displayed.
3. Select Jenkins from the list, right-click on the service name, and select Properties. The Jenkins Properties dialog is displayed.
4. Select the Log On tab and select This Account.
5. Enter your Windows account name and password.

6. Restart Jenkins service to make changes take effect.
7. Re-build the Jenkins project.
8. Check in Task Manager (Shift+Control+Esc) to see if the scan has started.