  In this paper, I describe a recent practical experience where JUnit was used
for testing security bugs in addition to functional bugs. Perl scripts were
also used during the exploration phase. The application being tested was
mature, but insecure.
