Graudit is a simple script and signature sets that allows you to find potential security flaws in source code using the GNU utility grep. It’s comparable to other static analysis applications like RATS, SWAAT and flaw-finder while keeping the technical requirements to a minimum and being very flexible.
Usage
Graudit supports several options and tries to follow good shell practices. For a list of the options you can run graudit -h or see below. The simplest way to use graudit is;
graudit /path/to/scanYou can download Graudit v1.1 here:
Or read more here.
Subscribe to Darknet RSS Feed Stored in: Countermeasures, Exploits/Vulnerabilities, Programming
Related Posts:
- Skavenger – source code auditing tool!
- SpikeSource Spike PHP Security Audit Tool
- FIS [File Inclusion Scanner] v0.1 – PHP Vulnerability
- w3af Fifth BETA for Download – Automated Web Auditing and Exploitation Framework
- Homeland Security Uncovers Critical Flaw in X11
- ratproxy – Passive Web Application Security Audit Tool
| 3,181 views |
I really like this. Simple and brutally effective.
Thanks Darknet!
This kind of scanner will produce many false positives to be really useful. Another problem not tackled with graudit is the problem with proned custom-made functions.
Did anyone found a (non-trivial) bug with graudit?
Hello,
I am the author of the aforementioned software. Version 1.2 has just been released which seriously reduces the number of false positives. The default rule set now focuses on lower hanging fruit.
I have found SQLi, RFI and command execution in popular web apps with graudit.
Version 1.2+ will address custom functions (it’s on github, but not in release).