flawfinder

Vulnerability scanner

Analyzes C/C++ source code for security vulnerabilities and reports potential flaws.

a static analysis tool for finding vulnerabilities in C/C++ source code

GitHub

498 stars
18 watching
82 forks
Language: Python
last commit: about 2 years ago
Linked from 1 awesome list


Backlinks from these awesome lists:

Related projects:

RepositoryDescriptionStars
designsecurity/progpilotAn application security testing tool for identifying vulnerabilities in PHP code333
pyupio/safetyDetects known security vulnerabilities in Python dependencies and provides recommendations for remediation.1,758
r0075h3ll/oralyzerA tool to identify vulnerabilities in web applications by probing for Open Redirections and other types of attacks.758
swisskyrepo/vulny-code-static-analysisA script to detect vulnerabilities in PHP source code using static analysis and regular expressions.397
kathanp19/gaussrfA tool for identifying potential vulnerabilities in websites by fetching known URLs and filtering out ones with open redirects or SSRF parameters.168
fkie-cad/cwe_checkerA tool for detecting common bugs in binary executables.1,155
jackofmosttrades/gadgetinspectorAnalyzes Java applications for potential deserialization gadget chains to help identify vulnerabilities and prioritize remediation.1,005
sukelluskello/vectorattackscannerAutomated tool for identifying and analyzing vulnerabilities in software components5
hackthelegacy/hack400toolA set of tools for gathering information and exploiting vulnerabilities in IBM Power Systems97
security-code-scan/security-code-scanDetects vulnerabilities in C# and VB.NET code942
1n3/blackwidowA Python-based web application scanner that gathers OSINT and fuzz data to identify OWASP vulnerabilities on target websites.1,545
s0md3v/strikerAn offensive information and vulnerability scanner that identifies potential security issues in web applications2,238
ke0z/vulchatgptAn IDA PRO plugin to analyze binaries for potential vulnerabilities using AI-powered decompilation and static analysis353
sectooladdict/wavsepAn open-source tool for evaluating web application vulnerabilities by analyzing the separation of concerns in web applications.232
m0nad/hellraiserScans networks to identify vulnerabilities by correlating CPEs with CVEs using an API562