Programming / Web Vulnerability Analysis / WebApp PenTest
by do son · Published November 2, 2018 · Last modified November 4, 2024
Python Taint Static analysis of Python web applications based on theoretical foundations (Control flow graphs, fixed point, data flow analysis) This report presents the static analysis too PyT which has...
Flawfinder Flawfinder searches through C/C++ source code looking for potential security flaws. To run flawfinder, simply give flawfinder a list of directories or files. For each directory given, all files...
Linux has long been used as an operating system, powering everything from supercomputers to smartphones. For those who have been in the Microsoft or Apple systems for a long time,...
Spectator Regex based source code scanner that uses git enterprise search interface to find potential security vulnerability and automatically create issues in an affected repository. Download git clone https://github.com/cucrisis/spectator.git Usage ...
Programming / Web Vulnerability Analysis
by do son · Published August 16, 2018 · Last modified August 5, 2019
phpcs-security-audit phpcs-security-audit is a set of PHP_CodeSniffer rules that find vulnerabilities and weaknesses related to security in PHP code. It currently has core PHP rules as well as Drupal 7 specific rules....
Parse: A PHP Security Scanner The Parse scanner is a static scanning tool to review your PHP code for potential security-related issues. A static scanner means that the code is not executed...
pyprotect pyprotect is a lightweight python code protector, makes your python project harder to reverse engineer. Features Cross-platform No need to install any extra dependents Very easy to use Only python3.x...
the Secure Coding Dojo The Secure Coding Dojo is a platform for delivering secure coding training. While it comes with its own vulnerable training application (the Insecure.Inc website) the training...
Programming / Web Vulnerability Analysis / WebApp PenTest
by do son · Published June 27, 2018 · Last modified December 16, 2024
drek is a static-code-analysis tool that can be used to perform security-focused code reviews. It enables an auditor to swiftly map the attack-surface of a large application, with an emphasis...
python-registry is a pure Python library that provides read-only access to Windows Registry files. These include NTUSER.DAT, userdiff, and SAM. The interface is two-fold: a high-level interface suitable for most...
RIPS RIPS is the most popular static code analysis tool to automatically detect vulnerabilities in PHP applications. By tokenizing and parsing all source code files, RIPS is able to transform...
Spidr Spidr is a versatile Ruby web spidering library that can spider a site, multiple domains, certain links or infinitely. Spidr is designed to be fast and easy to use....
SafeSQL is a static analysis tool for Go that protects against SQL injections. How does it work? SafeSQL uses the static analysis utilities in go/tools to search for all call sites of...
phptrace phptrace is a low-overhead tracing tool for PHP. It can trace all PHP executing, function calls, request information during run-time. And provides features like Filter, Statistics, Current Status and...
Raptor is a web-based (web-service + UI) github centric source-vulnerability scanner i.e. it scans a repository with just the github repo url. You can set up webhooks to ensure automated...
Support Securityonline.info site. Thanks!
