Linux has long been used as an operating system, powering everything from supercomputers to smartphones. For those who have been in the Microsoft or Apple systems for a long time, it can be intimidating....
Spectator Regex based source code scanner that uses git enterprise search interface to find potential security vulnerability and automatically create issues in an affected repository. Download git clone https://github.com/cucrisis/spectator.git Usage Targets Spectator hcs can...
Programming / Web Vulnerability Analysis
by do son · Published August 16, 2018 · Last modified August 5, 2019
phpcs-security-audit phpcs-security-audit is a set of PHP_CodeSniffer rules that find vulnerabilities and weaknesses related to security in PHP code. It currently has core PHP rules as well as Drupal 7 specific rules. The tool also checks...
Parse: A PHP Security Scanner The Parse scanner is a static scanning tool to review your PHP code for potential security-related issues. A static scanner means that the code is not executed and tested via a...
pyprotect pyprotect is a lightweight python code protector, makes your python project harder to reverse engineer. Features Cross-platform No need to install any extra dependents Very easy to use Only python3.x is supported by current...
the Secure Coding Dojo The Secure Coding Dojo is a platform for delivering secure coding training. While it comes with its own vulnerable training application (the Insecure.Inc website) the training portal can be used...
drek is a static-code-analysis tool that can be used to perform security-focused code reviews. It enables an auditor to swiftly map the attack-surface of a large application, with an emphasis on identifying development anti-patterns...
python-registry is a pure Python library that provides read-only access to Windows Registry files. These include NTUSER.DAT, userdiff, and SAM. The interface is two-fold: a high-level interface suitable for most tasks, and a low-level...
RIPS RIPS is the most popular static code analysis tool to automatically detect vulnerabilities in PHP applications. By tokenizing and parsing all source code files, RIPS is able to transform PHP source code into...
Spidr Spidr is a versatile Ruby web spidering library that can spider a site, multiple domains, certain links or infinitely. Spidr is designed to be fast and easy to use. Features Follows: a tags. iframe tags....
SafeSQL is a static analysis tool for Go that protects against SQL injections. How does it work? SafeSQL uses the static analysis utilities in go/tools to search for all call sites of each of the query functions in...
phptrace phptrace is a low-overhead tracing tool for PHP. It can trace all PHP executing, function calls, request information during run-time. And provides features like Filter, Statistics, Current Status and so on. It is...
Raptor is a web-based (web-service + UI) github centric source-vulnerability scanner i.e. it scans a repository with just the github repo url. You can set up webhooks to ensure automated scans every-time you commit...
PHP-Reaper PHP tool to scan ADOdb code for SQL Injections Why The main idea is to be able to detect problems as early as possible when the code is fresh in your mind. Shift as many...
Programming / Web Exploitation / Web Vulnerability Analysis
by do son · Published February 1, 2018 · Last modified October 25, 2022
PHP Vulnerability Hunter is an advanced whitebox PHP web application fuzzer that scans for several different classes of vulnerabilities via static and dynamic analysis. By instrumenting application code, PHP Vulnerability Hunter is able to...
Secure Your Connection
