01 September 2009 | 5,538 views

Graudit – Code Audit Tool Using Grep

Want to Learn Penetration Testing

Graudit is a simple script and signature sets that allows you to find potential security flaws in source code using the GNU utility grep. It’s comparable to other static analysis applications like RATS, SWAAT and flaw-finder while keeping the technical requirements to a minimum and being very flexible.

Usage

Graudit supports several options and tries to follow good shell practices. For a list of the options you can run graudit -h or see below. The simplest way to use graudit is;

graudit /path/to/scan

You can download Graudit v1.1 here:

graudit-1.1.tar.bz2

Or read more here.

Post to Twitter Post to Facebook Post to Google Buzz Post to Delicious Post to Digg Post to Reddit Post to StumbleUpon


Tags: , , , , , , ,


# Posted in: Countermeasures, Exploits/Vulnerabilities, Programming | * 3 Comments


Recent in Countermeasures:
- No BEAST Fix From Microsoft In December Patch Tuesday – But They Fixed Duqu Bug
- sslyze – Fast and Full-Featured SSL Configuration Scanner
- Twitter Purchases WhisperCore – Full Disk Encryption For Android Phones

Related Posts:
- YASAT – Yet Another Stupid Audit Tool
- Skavenger – source code auditing tool!
- SpikeSource Spike PHP Security Audit Tool

Most Read in Countermeasures:
- AJAX: Is your application secure enough? - 115,526 views
- Password Hasher Firefox Extension - 109,718 views
- NDR or Backscatter Spam – How Non Delivery Reports Become a Nuisance - 55,021 views

Advertise on Darknet


3 Responses to “Graudit – Code Audit Tool Using Grep”

  1. GZero 1 September 2009 at 9:26 am Permalink

    I really like this. Simple and brutally effective.

    Thanks Darknet!

  2. Henk 6 September 2009 at 4:10 pm Permalink

    This kind of scanner will produce many false positives to be really useful. Another problem not tackled with graudit is the problem with proned custom-made functions.

    Did anyone found a (non-trivial) bug with graudit?

  3. Wireghoul 18 September 2009 at 4:57 am Permalink

    Hello,

    I am the author of the aforementioned software. Version 1.2 has just been released which seriously reduces the number of false positives. The default rule set now focuses on lower hanging fruit.

    I have found SQLi, RFI and command execution in popular web apps with graudit.

    Version 1.2+ will address custom functions (it’s on github, but not in release).