/phpscan

Quick script to scan through a PHP project and flag up functions that are of interest when looking for security vulnerabilities. Aids manual code review.

Primary LanguagePythonGNU General Public License v3.0GPL-3.0

PHPscan

Quick and dirty script to scan through a PHP project and flag up functions that are of interest when looking for security vulnerabilities. Helps to save time when doing manual code review by drawing attention to specific places where vulnerabilities are more likely to exist.

Usage

Note that development was done using Python 2.7 and this should be used for execution.

  • git clone https://github.com/TartarusLabs/phpscan.git
  • cd phpscan
  • ./phpscan.py ~/Downloads/ReallySecureCMS/