3 projects tagged "vulnerability"
sqlmap is a penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a detection engine, many niche features, and a broad range of switches including database fingerprinting, data fetching from the database, and accessing the underlying file system and executing commands on the operating system via out-of-band connections.
Yasca is a program that looks for security vulnerabilities, code-quality, performance, and conformance to best practices in program source code. It integrates other open source programs, including FindBugs, PMD, JLint, JavaScript Lint, PHPLint, Cppcheck, and Pixy to scan certain file types, as well as custom scanners written for Yasca. It is a command-line tool, with reports generated in HTML, CSV, XML, SQLite, and other formats.
Graudit is a simple script and signature sets that allows you to find potential security flaws in source code using the GNU utility, grep. It's comparable to other static analysis applications like RATS, SWAAT, and flaw-finder while keeping the technical requirements to a minimum and being very flexible.