-
Notifications
You must be signed in to change notification settings - Fork 0
Source Code Security Audit (源代码安全审计)
License
akosoriod/Cobra
Folders and files
Name | Name | Last commit message | Last commit date | |
---|---|---|---|---|
Repository files navigation
- updated dependency Werkzeug==0.15.5
- Fix conflict time.clock
- Results on webApp translated into English
conda create --name cobra python=3
conda activate cobra
pip install -r requirements.txt
cp config.template config
python cobra.py -H 127.0.0.1 -P 5000
The project design is no longer able to achieve the current white-box scanning requirements, and is no longer being maintained for research use only, please do not use it in a production environment
Cobra is a source code security audit tool that supports detection of most significant security issues and vulnerabilities in source code of multiple development languages.
Supports development languages such as PHP, Java, and dozens of types of files.
The first batch of tens of thousands of insecure dependency checking rules and dozens of code security scanning rules are open, and more scanning rules will continue to be opened later.
Provide local Web Server service, can use GUI visual operation, also can support local API interface, convenient and other systems (release system, CI, etc.) docking extension.
Screenshot [! report01](https://whaleshark-team.github.io/ cobra/api) [! report02](https://whaleshark-team.github.io/ cobra/api)
The project was initiated and led by Feei, with core developers LiGhT1EsS, BlBana, 40huo, braveghz, and also thanks to other [contributors](https://github.com/WhaleShark-Team/cobra/ graphs/contributors), feel free to submit PRs.
- [Cobra Documentation](https://whaleshark-team.github.io/cobra/
About
Source Code Security Audit (源代码安全审计)
Resources
License
Code of conduct
Stars
Watchers
Forks
Packages 0
Languages
- Python 50.4%
- CSS 19.3%
- HTML 14.1%
- JavaScript 12.6%
- Java 1.5%
- PHP 1.2%
- Other 0.9%