8000 GitHub - akosoriod/Cobra: Source Code Security Audit (源代码安全审计)
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

akosoriod/Cobra

 
 

Repository files navigation

Updated 06-2021 python3

  • updated dependency Werkzeug==0.15.5
  • Fix conflict time.clock
  • Results on webApp translated into English

Web Deploy with Conda

  • conda create --name cobra python=3
  • conda activate cobra
  • pip install -r requirements.txt
  • cp config.template config
  • python cobra.py -H 127.0.0.1 -P 5000

Build Status Coverage Status GitHub (pre-)release license

asciicast

The project design is no longer able to achieve the current white-box scanning requirements, and is no longer being maintained for research use only, please do not use it in a production environment

Introduction

Cobra is a source code security audit tool that supports detection of most significant security issues and vulnerabilities in source code of multiple development languages.

Features

Multi-language Supported (support for multiple development languages)

Supports development languages such as PHP, Java, and dozens of types of files.

Multi-Vulnerabilities Supported (support for multiple vulnerability types)

The first batch of tens of thousands of insecure dependency checking rules and dozens of code security scanning rules are open, and more scanning rules will continue to be opened later.

GUI/CLI/API Mode (command line mode and API mode)

Provide local Web Server service, can use GUI visual operation, also can support local API interface, convenient and other systems (release system, CI, etc.) docking extension.

Screenshot

Screenshot [! report01](https://whaleshark-team.github.io/ cobra/api) [! report02](https://whaleshark-team.github.io/ cobra/api)

Contributors

The project was initiated and led by Feei, with core developers LiGhT1EsS, BlBana, 40huo, braveghz, and also thanks to other [contributors](https://github.com/WhaleShark-Team/cobra/ graphs/contributors), feel free to submit PRs.

Links

About

Source Code Security Audit (源代码安全审计)

Resources

License

Code of conduct

Stars

Watchers

Forks

Packages

No packages published

Languages

  • Python 50.4%
  • CSS 19.3%
  • HTML 14.1%
  • JavaScript 12.6%
  • Java 1.5%
  • PHP 1.2%
  • Other 0.9%
0