flawfinder

Vulnerability scanner

Analyzes C/C++ source code for security vulnerabilities and reports potential flaws.

a static analysis tool for finding vulnerabilities in C/C++ source code

GitHub

498 stars
18 watching
82 forks
Language: Python
last commit: 7 months ago
Linked from 1 awesome list


Backlinks from these awesome lists:

Related projects:

Repository Description Stars
designsecurity/progpilot An application security testing tool for identifying vulnerabilities in PHP code 333
pyupio/safety Detects known security vulnerabilities in Python dependencies and provides recommendations for remediation. 1,758
r0075h3ll/oralyzer A tool to identify vulnerabilities in web applications by probing for Open Redirections and other types of attacks. 758
swisskyrepo/vulny-code-static-analysis A script to detect vulnerabilities in PHP source code using static analysis and regular expressions. 397
kathanp19/gaussrf A tool for identifying potential vulnerabilities in websites by fetching known URLs and filtering out ones with open redirects or SSRF parameters. 168
fkie-cad/cwe_checker A tool for detecting common bugs in binary executables. 1,155
jackofmosttrades/gadgetinspector Analyzes Java applications for potential deserialization gadget chains to help identify vulnerabilities and prioritize remediation. 1,005
sukelluskello/vectorattackscanner Automated tool for identifying and analyzing vulnerabilities in software components 5
hackthelegacy/hack400tool A set of tools for gathering information and exploiting vulnerabilities in IBM Power Systems 97
security-code-scan/security-code-scan Detects vulnerabilities in C# and VB.NET code 942
1n3/blackwidow A Python-based web application scanner that gathers OSINT and fuzz data to identify OWASP vulnerabilities on target websites. 1,545
s0md3v/striker An offensive information and vulnerability scanner that identifies potential security issues in web applications 2,238
ke0z/vulchatgpt An IDA PRO plugin to analyze binaries for potential vulnerabilities using AI-powered decompilation and static analysis 353
sectooladdict/wavsep An open-source tool for evaluating web application vulnerabilities by analyzing the separation of concerns in web applications. 232
m0nad/hellraiser Scans networks to identify vulnerabilities by correlating CPEs with CVEs using an API 562