Kali Linux

SCodeScanner : Stands For Source Code Scanner Where The User Can Scans The Source Code For Finding The Critical Vulnerabilities

SCodeScanner stands for Source Code scanner where the user can scans the source code for finding the Critical Vulnerabilities. The main objective for this scanner is to find the vulnerabilities inside the source code before code gets published in Prod.

Features

  • Supported PHP Language
  • Supported YAML Language
  • Pass results to bug tracking services like Jira also Slack (Sending files to group to multiple people at once).
  • Gives results in JSON format, which can easily be used to any other program.
  • Works with Rules. We only need to create some rules which the target rule is not present in php/yaml directory.
  • Rules that can scan advance patterns

Achievements

SCodeScanner received 5 CVEs for finding vulnerabilities in multiple CMS plugins.

  • CVE-2022-1465
  • CVE-2022-1474
  • CVE-2022-1527
  • CVE-2022-1532
  • CVE-2022-1604

How to run?

  • Download the repository –
  • Run pip3 install -r requirements.txt
  • And run python3 scscanner.py --help
R K

Recent Posts

Comments in Bash Scripts

What Are Bash Comments? Comments in Bash scripts, are notes in your code that the…

5 days ago

Shebang (#!) in Bash Script

When you write a Bash script in Linux, you want it to run correctly every…

6 days ago

Bash String Concatenation – Bash Scripting

Introduction If you’re new to Bash scripting, one of the first skills you’ll need is…

6 days ago

Learn Bash Scripting: How to Create and Run Shell Scripts for Beginners

What is Bash Scripting? Bash scripting allows you to save multiple Linux commands in a file and…

7 days ago

Bash if…else Statement – Bash Scripting

When it comes to automating tasks on Linux, Bash scripting is an essential skill for both beginners…

7 days ago

Bash Functions Explained: Syntax, Examples, and Best Practices

Learn how to create and use Bash functions with this complete tutorial. Includes syntax, arguments,…

1 week ago