PHPStan v1.10.35 releases: PHP Static Analysis Tool
PHPStan – PHP Static Analysis Tool PHPStan focuses on finding errors in your code without actually running it. It catches whole classes of bugs even before you write tests for the code. It moves...
Category: Programming
Cppcheck v2.12.1 released, a static analysis tool for C/C++ code
Cppcheck Cppcheck is a static analysis tool for C/C++ code. It provides a unique code analysis to detect bugs and focuses on detecting undefined behavior and dangerous coding constructs. The goal is to detect only real errors...
ronin v2.0.5 releases: Ruby platform for vulnerability research and exploit development
ronin Ronin is a Ruby platform for vulnerability research and exploit development. Ronin allows for the rapid development and distribution of code, Exploits, Payloads, Scanners, etc, via Repositories. Features Supports installing/updating/uninstalling of Repositories. Supports installing Repositories from various media types: Subversion...
semgrep v1.41 releases: Fast and syntax-aware semantic code pattern search
Semgrep Semgrep is a command-line tool for offline static analysis. Use pre-built or custom rules to enforce code and security standards in your codebase. You can try it now with our interactive live editor. Semgrep combines the...
Bearer v1.23.1 releases: finds risks and vulnerabilities in your code
Bearer Bearer is a static application security testing (SAST) tool that scans your source code and analyzes your data flows to discover, filter and prioritize security risks and vulnerabilities leading to sensitive data exposures (PII, PHI, PD). We...
INTERCEPT v1.4 releases: Policy as Code Static Analysis Auditing
INTERCEPT Stupidly easy to use, small footprint Policy as Code subsecond command-line scanner that leverages the power of the fastest multi-line search tool to scan your codebase. It can be used as a linter, guard...
PHP-Fuzzer v0.0.10 releases: Experimental fuzzer for PHP libraries
PHP Fuzzer This library implements a fuzzer for PHP, which can be used to find bugs in libraries (particularly parsing libraries) by feeding them “random” inputs. Feedback from edge coverage instrumentation is used to guide the...
CTFd v3.6 releases: Capture The Flag framework
What is CTFd? CTFd is a Capture The Flag framework focusing on ease of use and customizability. It comes with everything you need to run a CTF and it’s easy to customize with plugins...
gosec v2.17 releases: Golang Security Checker
gosec – Golang Security Checker Inspects source code for security problems by scanning the Go AST. Usage Gosec can be configured to only run a subset of rules, exclude certain file paths, and produce...
Code Analysis v1.9 releases: code comprehensive analysis platform
What is TCA Tencent Cloud Code Analysis (TCA for short, code-named CodeDog inside the company early) is a code comprehensive analysis platform, which includes three components: server, web, and client. It supports the integration...
