Graudit – Code Audit Tool Using Grep

The New Acunetix V12 Engine


Graudit is a simple script and signature sets that allows you to find potential security flaws in source code using the GNU utility grep. It’s comparable to other static analysis applications like RATS, SWAAT and flaw-finder while keeping the technical requirements to a minimum and being very flexible.

Usage


Graudit supports several options and tries to follow good shell practices. For a list of the options you can run graudit -h or see below. The simplest way to use graudit is;

You can download Graudit v1.1 here:

graudit-1.1.tar.bz2

Or read more here.

Posted in: Countermeasures, Exploits/Vulnerabilities, Secure Coding

, , ,


Latest Posts:


BDFProxy - Patch Binaries via MITM - BackdoorFactory + mitmProxy BDFProxy – Patch Binaries via MiTM – BackdoorFactory + mitmproxy
BDFProxy allows you to patch binaries via MiTM with The Backdoor Factory combined with mitmproxy enabling on the fly patching of binary downloads
Domained - Multi Tool Subdomain Enumeration Domained – Multi Tool Subdomain Enumeration
Domained is a multi tool subdomain enumeration tool that uses several subdomain enumeration tools and wordlists to create a unique list of subdomains.
Acunetix Vulnerability Scanner For Linux Now Available Acunetix Vulnerability Scanner For Linux Now Available
Acunetix Vulnerability Scanner For Linux is now available, now you get all of the functionality of Acunetix, with all of the dependability of Linux.
Gerix WiFi Cracker - Wireless 802.11 Hacking Tool With GUI Gerix WiFi Cracker – Wireless 802.11 Hacking Tool With GUI
Gerix WiFi cracker is an easy to use Wireless 802.11 Hacking Tool with a GUI, it was originally made to run on BackTrack and this version has been updated for Kali (2018.1).
Malcom - Malware Communication Analyzer Malcom – Malware Communication Analyzer
Malcom is a Malware Communication Analyzer designed to analyze a system's network communication using graphical representations of network traffic.
WepAttack - WLAN 802.11 WEP Key Hacking Tool WepAttack – WLAN 802.11 WEP Key Hacking Tool
WepAttack is a WLAN open source Linux WEP key hacking tool for breaking 802.11 WEP keys using a wordlist based dictionary attack.


3 Responses to Graudit – Code Audit Tool Using Grep

  1. GZero September 1, 2009 at 9:26 am #

    I really like this. Simple and brutally effective.

    Thanks Darknet!

  2. Henk September 6, 2009 at 4:10 pm #

    This kind of scanner will produce many false positives to be really useful. Another problem not tackled with graudit is the problem with proned custom-made functions.

    Did anyone found a (non-trivial) bug with graudit?

  3. Wireghoul September 18, 2009 at 4:57 am #

    Hello,

    I am the author of the aforementioned software. Version 1.2 has just been released which seriously reduces the number of false positives. The default rule set now focuses on lower hanging fruit.

    I have found SQLi, RFI and command execution in popular web apps with graudit.

    Version 1.2+ will address custom functions (it’s on github, but not in release).