Comments on: Graudit – Code Audit Tool Using Grep http://www.darknet.org.uk/2009/09/graudit-code-audit-tool-using-grep/ Ethical Hacking, Penetration Testing & Computer Security Tue, 14 Feb 2012 00:17:07 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: Wireghoul http://www.darknet.org.uk/2009/09/graudit-code-audit-tool-using-grep/#comment-159035 Wireghoul Fri, 18 Sep 2009 04:57:57 +0000 http://www.darknet.org.uk/?p=2046#comment-159035 Hello, I am the author of the aforementioned software. Version 1.2 has just been released which seriously reduces the number of false positives. The default rule set now focuses on lower hanging fruit. I have found SQLi, RFI and command execution in popular web apps with graudit. Version 1.2+ will address custom functions (it's on github, but not in release). Hello,

I am the author of the aforementioned software. Version 1.2 has just been released which seriously reduces the number of false positives. The default rule set now focuses on lower hanging fruit.

I have found SQLi, RFI and command execution in popular web apps with graudit.

Version 1.2+ will address custom functions (it’s on github, but not in release).

]]> By: Henk http://www.darknet.org.uk/2009/09/graudit-code-audit-tool-using-grep/#comment-158918 Henk Sun, 06 Sep 2009 16:10:24 +0000 http://www.darknet.org.uk/?p=2046#comment-158918 This kind of scanner will produce many false positives to be really useful. Another problem not tackled with graudit is the problem with proned custom-made functions. Did anyone found a (non-trivial) bug with graudit? This kind of scanner will produce many false positives to be really useful. Another problem not tackled with graudit is the problem with proned custom-made functions.

Did anyone found a (non-trivial) bug with graudit?

]]> By: GZero http://www.darknet.org.uk/2009/09/graudit-code-audit-tool-using-grep/#comment-158868 GZero Tue, 01 Sep 2009 09:26:00 +0000 http://www.darknet.org.uk/?p=2046#comment-158868 I really like this. Simple and brutally effective. Thanks Darknet! I really like this. Simple and brutally effective.

Thanks Darknet!

]]>