Showing 1 - 8 of 8

Files

GRAudit Grep Auditing Tool 2.8: Posted Nov 19, 2020; Authored by Wireghoul | Site justanotherhacker.com; Graudit is a simple script and signature sets that allows you to find potential security flaws in source code using the GNU utility, grep. It's comparable to other static analysis applications like RATS, SWAAT, and flaw-finder while keeping the technical requirements to a minimum and being very flexible.; Changes: Updated Electron rules. Updated PHP rules. More scala rules and a scala signature set. Updated C rules. Updated Java rules. Many other updates as well.; tags | tool; systems | unix; MD5 | e38b9c328f5747a4cd4db02bd628a0ef; Download | Favorite | View

Related Files

GRAudit Grep Auditing Tool 1.9: Posted Jan 11, 2011; Authored by Wireghoul | Site justanotherhacker.com; Graudit is a simple script and signature sets that allows you to find potential security flaws in source code using the GNU utility, grep. It's comparable to other static analysis applications like RATS, SWAAT, and flaw-finder while keeping the technical requirements to a minimum and being very flexible.; Changes: This release fixes the PHP (php/xss.db) database, which had a blank line at the end, causing everything to match. It adds a test case for blank lines in signature scripts. It adds a database validating aux script. It updates the Makefile file manifest. It fixes a bug in the test script template (t/blank-test.sh).; systems | unix; MD5 | 1c0e8954e8b205915ad9bb698b43611f; Download | Favorite | View

GRAudit Grep Auditing Tool 1.8: Posted Jan 8, 2011; Authored by Wireghoul | Site justanotherhacker.com; Graudit is a simple script and signature sets that allows you to find potential security flaws in source code using the GNU utility, grep. It's comparable to other static analysis applications like RATS, SWAAT, and flaw-finder while keeping the technical requirements to a minimum and being very flexible.; Changes: The -L operator now does vim-friendly line numbers. Man pages and documentation were updated. Signatures for PHP, JSP, Dotnet, Perl, and Python were updated. Bugs in the aux/ scripts were fixed and additional scripts were provided. CVS directories are now ignored by default.; systems | unix; MD5 | 9b63cf2c003ce3b0be730a77150e1aeb; Download | Favorite | View

GRAudit Grep Auditing Tool 1.7: Posted Aug 3, 2010; Authored by Wireghoul | Site justanotherhacker.com; Graudit is a simple script and signature sets that allows you to find potential security flaws in source code using the GNU utility, grep. It's comparable to other static analysis applications like RATS, SWAAT, and flaw-finder while keeping the technical requirements to a minimum and being very flexible.; Changes: New PHP signatures. Improved C signatures for fewer false positives. Improved dotnet signatures. Whitespace neutrality for all signatures. The -l operator lists available databases. An -x operator for excluding files. A configure script has been added to the make chain. Makefile install targets have changed, install is now server-wide.; systems | unix; MD5 | b40ef6d7c2de0b17bcdcfa8f863c24aa; Download | Favorite | View

GRAudit Grep Auditing Tool 1.6: Posted May 14, 2010; Authored by Wireghoul | Site justanotherhacker.com; Graudit is a simple script and signature sets that allows you to find potential security flaws in source code using the GNU utility, grep. It's comparable to other static analysis applications like RATS, SWAAT, and flaw-finder while keeping the technical requirements to a minimum and being very flexible.; Changes: This release adds a bugfix for greedy separator code, imports C rules from RATS, starts a test suite transition to the Junio C Hamano Git-inspired one, adds a case insensitive switch, adds dotnet signatures, discontinues the rough database, adds the combined database "all", and supports the GRDIR environment variable.; systems | unix; MD5 | 5f43b14b3af77f5af7e02fc549bcf4b3; Download | Favorite | View

GRAudit Grep Auditing Tool 1.4: Posted Nov 25, 2009; Authored by Wireghoul | Site justanotherhacker.com; Graudit is a simple script and signature sets that allows you to find potential security flaws in source code using the GNU utility, grep. It's comparable to other static analysis applications like RATS, SWAAT, and flaw-finder while keeping the technical requirements to a minimum and being very flexible.; Changes: New and improved signatures were added. Grep versions earlier than 2.5.3 are now gracefully detected. Preparations were done for version 1.5.; systems | unix; MD5 | 291545462e89943aed26637047e78dc8; Download | Favorite | View

GRAudit Grep Auditing Tool 1.3: Posted Nov 3, 2009; Authored by Wireghoul | Site justanotherhacker.com; Graudit is a simple script and signature sets that allows you to find potential security flaws in source code using the GNU utility, grep. It's comparable to other static analysis applications like RATS, SWAAT, and flaw-finder while keeping the technical requirements to a minimum and being very flexible.; Changes: Some signatures have been added to existing databases. There are signature improvements to existing databases. JSP and ASP rulesets have been added. Testing has been improved.; systems | unix; MD5 | 71297a09bd5c378826acc91e44baceb3; Download | Favorite | View

GRAudit Grep Auditing Tool 1.2: Posted Sep 22, 2009; Authored by Wireghoul | Site justanotherhacker.com; Graudit is a simple script and signature sets that allows you to find potential security flaws in source code using the GNU utility, grep. It's comparable to other static analysis applications like RATS, SWAAT, and flaw-finder while keeping the technical requirements to a minimum and being very flexible.; Changes: Default signatures are now aimed at low hanging fruit. Documentation was improved. Bugs in graudit and signatures were fixed.; systems | unix; MD5 | dd513e8663ab1bcfe61a034823c75d8f; Download | Favorite | View

Graudit Source Code Analysis Tool 1.1: Posted Sep 16, 2009; Authored by Wireghoul | Site justanotherhacker.com; Graudit is a simple script and signature sets that allows you to find potential security flaws in source code using the GNU utility, grep. It's comparable to other static analysis applications like RATS, SWAAT, and flaw-finder while keeping the technical requirements to a minimum and being very flexible.; systems | unix; MD5 | a4a8937481a71f27df85bd7cd9ec2d25; Download | Favorite | View

Page 1 of 1 Back 1 Next