SpikeSource Spike PHP Security Audit Tool

Use Netsparker


Spike is an Open Source tool based on the popular RATS C based auditing tool implemented for PHP.

The tool Spike basically does static analysis of php code for security exploits, PHP5 and call-time pass-by-reference are currently required, but a PHP4 version is coming out this week.

This tool is especially welcomed by Darknet as there aren’t many static analysis tools out there that are free, and there are very few tools for auditing PHP code..which as we all known tends to be coded quite insecurely at times (just look at phpBB and PhpNUKE).


You can find the latest version here:

Spike PHP Audit Tool

Posted in: Countermeasures, Hacking Tools, Web Hacking

, , , , , , , ,


Latest Posts:


BDFProxy - Patch Binaries via MITM - BackdoorFactory + mitmProxy BDFProxy – Patch Binaries via MiTM – BackdoorFactory + mitmproxy
BDFProxy allows you to patch binaries via MiTM with The Backdoor Factory combined with mitmproxy enabling on the fly patching of binary downloads
Domained - Multi Tool Subdomain Enumeration Domained – Multi Tool Subdomain Enumeration
Domained is a multi tool subdomain enumeration tool that uses several subdomain enumeration tools and wordlists to create a unique list of subdomains.
Acunetix Vulnerability Scanner For Linux Now Available Acunetix Vulnerability Scanner For Linux Now Available
Acunetix Vulnerability Scanner For Linux is now available, now you get all of the functionality of Acunetix, with all of the dependability of Linux.
Gerix WiFi Cracker - Wireless 802.11 Hacking Tool With GUI Gerix WiFi Cracker – Wireless 802.11 Hacking Tool With GUI
Gerix WiFi cracker is an easy to use Wireless 802.11 Hacking Tool with a GUI, it was originally made to run on BackTrack and this version has been updated for Kali (2018.1).
Malcom - Malware Communication Analyzer Malcom – Malware Communication Analyzer
Malcom is a Malware Communication Analyzer designed to analyze a system's network communication using graphical representations of network traffic.
WepAttack - WLAN 802.11 WEP Key Hacking Tool WepAttack – WLAN 802.11 WEP Key Hacking Tool
WepAttack is a WLAN open source Linux WEP key hacking tool for breaking 802.11 WEP keys using a wordlist based dictionary attack.


3 Responses to SpikeSource Spike PHP Security Audit Tool

  1. Ezra Nugroho August 2, 2006 at 5:02 am #

    Thank you for the post, guys.

    BTW, the php 4 friendly version was released yesterday.

    http://ez.spikesource.com/phpsecaudit_023_released.htm
    http://developer.spikesource.com/projects/phpsecaudit

    Thanks,
    Ezra

  2. Darknet August 2, 2006 at 8:31 am #

    No worries, we are always happy to support new projects.

    Especially those which will lead to more secure coding practises for everyone!

  3. devloop August 2, 2006 at 11:19 pm #

    Very interesting project :)

    You should also try Wapiti for blackbox testing. It’s a “web application vulnerability scanner” released under the GPL License.