Commit Graph

  • e6fcd0d3ca Semgrep rules to replace this script master Swissky 2022-04-30 15:00:48 +0200
  • 561726732e
    Update FUNDING.yml Swissky 2021-01-08 20:51:49 +0100
  • 8d8e1b21ce
    Merge pull request #13 from Rude-Monkey/add-information-leak-indicator Swissky 2020-10-02 11:34:03 +0200
  • 438f8ada61 Feat: add debug_print_backtrace to the list of info leak indicators #13 Vincent Gilles 2020-10-02 10:50:53 +0200
  • e23636ae70
    Github Action - CodeQL Swissky 2020-10-01 10:52:51 +0200
  • f2df2acd6d XXE / SSRF / Cookies and more use-cases Swissky 2020-09-29 14:08:36 +0200
  • 95fbef209c Cryptographic hash, random and info leak Swissky 2020-06-15 20:11:43 +0200
  • 31962bee50 pcntl_exec + server side template injection Swissky 2020-01-16 23:33:55 +0100
  • db89689cde Test case with MD5 hash Swissky 2020-01-11 00:13:17 +0100
  • a0be9801bf
    Update README.md Swissky 2020-01-11 00:08:09 +0100
  • ee2c747c6c High entropy string detection + code refactor add_vuln() Swissky 2020-01-11 00:06:47 +0100
  • e3b1d7fb3c Fix maximum recursion error + catch hardcoded password in define() Swissky 2020-01-09 22:54:56 +0100
  • 4f985f9709
    Update README.md Swissky 2019-11-13 23:02:45 +0100
  • 4911f157c5
    SPONSOR - Adding sponsor button Swissky 2019-09-22 16:12:30 +0200
  • 426b6111d9
    Merge pull request #8 from tanaydin/pycodestyle Swissky 2019-04-05 18:57:20 +0200
  • ee80485bea
    Merge pull request #11 from tanaydin/fixfor-encoding Swissky 2019-04-05 18:52:46 +0200
  • 5b98259818
    Merge branch 'master' into pycodestyle #8 tanaydin sirin 2019-04-05 17:36:27 +0200
  • d363731e80 Fix for encoding files with different encodings. #11 #10 Tanaydin Sirin 2019-04-05 17:32:25 +0200
  • af1df0b5b1 Fix for unicode error. #9 Tanaydin Sirin 2019-04-05 17:26:22 +0200
  • fe8786101a Fixes for errors by pycodestyle (except E501) to run it pycodestyle . --ignore=E501 Tanaydin Sirin 2019-04-05 16:32:45 +0200
  • 659b6a1e2c
    Merge pull request #7 from tanaydin/python3 Swissky 2019-04-05 15:52:12 +0200
  • b3734a43f7 Python3 fix for directory not found error. #7 Tanaydin Sirin 2019-04-05 15:43:04 +0200
  • be2d110578 Reformated files for python3, changed some function calls. Tanaydin Sirin 2019-04-05 15:38:57 +0200
  • def6aaf64f
    Merge pull request #6 from tanaydin/plain_output Swissky 2019-04-05 15:34:01 +0200
  • 8e67f536cc Added --plain output to exporter, it works with files so it is logical to make it plain all time. #6 Tanaydin Sirin 2019-04-05 15:22:22 +0200
  • 9c91219532
    Merge pull request #5 from tanaydin/plain_output Swissky 2019-04-05 15:16:13 +0200
  • 6732d43099
    Merge pull request #3 from tanaydin/plain_output tanaydin sirin 2019-04-05 15:12:49 +0200
  • 0703843c4e Better output for file. #5 Tanaydin Sirin 2019-04-05 15:11:57 +0200
  • 6d452748ec
    Merge pull request #4 from tanaydin/plain_output Swissky 2019-04-05 15:11:46 +0200
  • 7a0bc642a8
    Merge pull request #3 from tanaydin/patch-1 Swissky 2019-04-05 15:10:03 +0200
  • bf86549569
    Merge pull request #2 from tanaydin/plain_output tanaydin sirin 2019-04-05 14:27:14 +0200
  • 07dd6eddf4
    Merge pull request #1 from tanaydin/patch-1 tanaydin sirin 2019-04-05 14:26:46 +0200
  • 8c425bd30d Adds --plain for plain output. #4 Tanaydin Sirin 2019-04-05 14:25:05 +0200
  • 18b352fe71
    Update functions.py #3 tanaydin sirin 2019-04-05 12:47:17 +0200
  • 7e1d2a35b8 Hardcoded credential Swissky 2017-11-20 21:56:02 +0100
  • 5ea956e411 False positive check $xx='const'; Swissky 2017-11-14 13:45:07 +0100
  • b062f507a8 zsh:1: command not found: q Swissky 2017-11-14 13:24:19 +0100
  • 3e5e9ca74e Check for constant var Swissky 2017-11-14 11:10:21 +0100
  • 02afeab9cd Export script Swissky 2017-11-14 09:07:12 +0100
  • e280f50e0f Bugfix - Opening inexistent file Swissky 2017-11-12 13:42:25 +0100
  • ca3fba1758 More indicators : Header injection , URL redirect, SQL etc Swissky 2017-08-05 15:23:40 +0200
  • 626c3581b8 BUGFIX - Colored variable badly displayed when count>2 Swissky 2017-06-06 22:51:01 +0200
  • bd2d77b6c9 BUGFIX - Only the nth occurence var is colored if dup vuln Swissky 2017-06-05 22:56:23 +0200
  • 37887b7635 BUGFIX - False positive for declaration $var = pgconnect Swissky 2017-06-05 21:15:38 +0200
  • 1289809b15 BUGFIX - Detection for var as for($something as $else) Swissky 2017-06-05 20:18:48 +0200
  • fddb914e38 FEATURE - Vulnerability and file count Swissky 2017-06-05 19:10:25 +0200
  • 4ad8f01911 FEATURE: XPATH,LDAP,Assert, PGSQLi detection added Swissky 2017-05-29 22:02:00 +0200
  • 7aa1fd26b9 FEATURE - XSS detection with print Swissky 2017-05-28 23:23:07 +0200
  • a21792a585 FEATURE - SQL injection PDO detection Swissky 2017-05-28 23:15:33 +0200
  • 5160b19e1b FEATURE : PHP object injection detection Swissky 2017-05-28 22:42:28 +0200
  • c75f1eb415 Bugfix - Constant init var fixed Swissky 2017-05-28 22:11:40 +0200
  • 012581e641 Bugfix - "POST and POST" now detected as 2 vulns Swissky 2017-05-28 20:58:07 +0200
  • d8b39c37db License added Swissky 2017-05-27 21:05:28 +0200
  • 07b302e184 Feature - check declaration for false positive Swissky 2017-05-27 03:15:49 +0200
  • df57a15b1f Bug fix - Multiple variables in one single line Swissky 2017-05-27 03:07:46 +0200
  • e4b2411ddd Small regex improvement to detect vulnerabilities Swissky 2017-05-26 20:52:23 +0200
  • fb44cb3b51 Help added for command line Swissky 2017-05-25 17:30:16 +0200
  • 7797481bf7 Bugfix - Constant var not vuln +$_XXX vuln display Swissky 2017-05-25 15:54:35 +0200
  • df9851983d Check declaration - following include Swissky 2017-05-24 00:23:05 +0200
  • 1a128bd1ac New display + bug identification Swissky 2017-05-23 00:23:47 +0200
  • 6588cb094a TODO List updated - check_declaration will be created Swissky 2017-05-21 23:24:06 +0200
  • c78a7d950d Echo bug fixed - refactored into small fcts Swissky 2017-05-21 20:39:28 +0200
  • 017f1eb5b1 Display function cleaned Swissky 2017-05-21 17:59:11 +0200
  • f1e06def4c Basic refactoring Swissky 2017-05-21 15:56:42 +0200
  • 9c5d60c5e7 Initial commit - Old version + Test files Swissky 2017-05-14 23:10:03 +0200
  • 2ab297f944 Initial commit Swissky 2017-05-14 22:56:38 +0200