Comments on: OWASP CodeCrawler – Static Code Review Tool http://www.darknet.org.uk/2010/03/owasp-codecrawler-static-code-review-tool/ Ethical Hacking, Penetration Testing & Computer Security Tue, 14 Feb 2012 00:17:07 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: Darknet http://www.darknet.org.uk/2010/03/owasp-codecrawler-static-code-review-tool/#comment-162159 Darknet Tue, 30 Mar 2010 10:24:07 +0000 http://www.darknet.org.uk/?p=2510#comment-162159 That sounds lame, gonna check out fxcop. That sounds lame, gonna check out fxcop.

]]> By: dotnetprogrammer http://www.darknet.org.uk/2010/03/owasp-codecrawler-static-code-review-tool/#comment-162115 dotnetprogrammer Mon, 29 Mar 2010 21:45:55 +0000 http://www.darknet.org.uk/?p=2510#comment-162115 Considering this thing alerts on COMMENTS the noise level is far beyond anything useful. Example if you have a comment with the word "Select" as in "selects items from an array and orders by value" this thing logs it as a critical fault (potential SQL injection). Lame. Considering this thing alerts on COMMENTS the noise level is far beyond anything useful. Example if you have a comment with the word “Select” as in “selects items from an array and orders by value” this thing logs it as a critical fault (potential SQL injection).

Lame.

]]> By: aero http://www.darknet.org.uk/2010/03/owasp-codecrawler-static-code-review-tool/#comment-162006 aero Thu, 25 Mar 2010 09:02:29 +0000 http://www.darknet.org.uk/?p=2510#comment-162006 yes yes

]]> By: Hannibal http://www.darknet.org.uk/2010/03/owasp-codecrawler-static-code-review-tool/#comment-161992 Hannibal Tue, 23 Mar 2010 12:09:47 +0000 http://www.darknet.org.uk/?p=2510#comment-161992 Personally i think this thing sucks :) It does not do a good a job, and Microsoft own tool fxcop is pretty damn awesome... But that's only my opinion. :) Personally i think this thing sucks :) It does not do a good a job, and Microsoft own tool fxcop is pretty damn awesome…

But that’s only my opinion. :)

]]>