FEATURE : PHP object injection detection

functions.py

@@ -102,7 +102,7 @@ def check_declaration(content, vuln, path):
 		# Check constant then return True if constant because it's false positive
 		declaration_text = "$"+vuln[1:] +declaration[0][0]+"="+declaration[0][1]
 		line_declaration = find_line_declaration(declaration_text, content)
-		regex_constant = re.compile("\$"+vuln[1:]+"([\t ]*)=[\t ]*([\"\'(]*?[a-zA-Z0-9{}_]*?[\"\')]*?);")
+		regex_constant = re.compile("\$"+vuln[1:]+"([\t ]*)=[\t ]*?([\"\'(]*?[a-zA-Z0-9{}_\(\)@\.: ]*?[\"\')]*?);")
 		false_positive = regex_constant.match(declaration_text)
 
 		if false_positive:

index.py

@@ -8,7 +8,6 @@
 # TODO afficher toutes les modifications de la variable -
 # TODO checker recursivement les vulns dans la déclaration d'une var
 # BUG color var['something']
-# TODO serialize detection
 
 import sys
 import argparse

indicators.py

@@ -19,6 +19,8 @@ payloads = [
   ["require_once","File Inclusion",[]],
   ["readfile","File Inclusion",[]],
   ["file_get_contents","File Inclusion",[]],
+  ["show_source","File Inclusion",[]],
+  ["highlight_file","File Inclusion",[]],
 
   ["mysql_query","SQL Injection",["mysql_real_escape_string"]],
   ["mysql_unbuffered_query","SQL Injection",["mysql_real_escape_string"]],
@@ -32,7 +34,9 @@ payloads = [
   ["move_uploaded_file","File Upload",[]],
 
   ["echo","Cross Site Scripting",["htmlentities","htmlspecialchars"]],
-
   # Print etc
-  ["mail", "Insecure E-mail",[]]
+
+  ["mail", "Insecure E-mail",[]],
+
+  ["unserialize", "PHP Object Injection",[]]
 ]