Install the IntelliJ plugin

Fluid Attacks’ IntelliJ plugin  enables you to view the following directly on IntelliJ IDEA and other supported IDEs:

1. A list of the types of vulnerabilities  and their specific cases that Fluid Attacks has identified so far in the source code of your products.
2. The specific lines of code in which a vulnerability detected by Fluid Attacks’ tools or hacking team is present.

To install the plugin please follow these steps:

1. Go to JetBrains Marketplace  and use the search bar to look for ‘Fluid Attacks’.

Alternatively, in the IDE, such as IntelliJ IDEA, open your settings and click on Plugins, then search for ‘Fluid Attacks’ in the Marketplace tab.

1. Click on the search result to be directed to the Fluid Attacks plugin page. There, click the Get button.

If installing the plugin from the IDE, click the Install button next to the search result. When it is done, restart IntelliJ IDEA.

1. Log in  to Fluid Attacks’ platform.
2. Generate and copy an API token from the platform (for detailed instructions, see Generate or revoke the API Token ).

1. Go to the IDE and click on the Fluid Attacks tab on the left side, then paste the API token in the provided field and click on Add Token.

Upon providing the token, the tab reloads and shows you a tree view with the vulnerable locations in your repository, categorized by type of vulnerability. Clicking on a location takes you to the relevant line(s) in the respective file.