SCodeScanner stands for Source Code scanner where the user can scans the source code for finding the Critical Vulnerabilities.

Last update: Dec 13, 2022

Related tags

Overview

SCodeScanner

The SCodeScanner stands for Source Code Scanner, where you can scan your source code files like PHP and get identify the vulnerabilities inside it. The tool can use by Pentester, Developer to quickly identify the weakness.

Learn more on http://scodescanner.info

Features

The main features for this tool are:-

Scans the whole folder which contains multiple PHP files.
Scans folder inside a folder, NOTE: This scans only one time, it will not scan folders inside folders inside folder
It will not only notify you at which file but also which line the vulnerable code exists for quickly identified it.
Scans not only the PRE-Defined PHP variables but also scans the custom variables. Like a $test1 = $_GET["aaa"], then it scans for both $test1 and the GET variables inside the source code
Scans functions with a function that contains our variable. Like include(htmlentities($test)) so it will parse this and give the results like the $test variable found inside the include function. Because there might be possiblity of using base64 function instead of htmlentities.
It runs on your localhost, where you will have to give the folder name for scans.
Give results out for each file inside the anchors tag (So you can move on to it.)
You can add more functions which are dangerous if you found missing any inside the vulnerablefunctions python file.

Test Vulnerable Folders

This tool uses vulnerable scripts from this repo:- https://github.com/snoopysecurity/Vulnerable-Code-Snippets

There are predifined folder named final, where it contains the PHP files/folder. Just for test. You can also use that folder to see how this tool will find the results in PHP.

On terminal: python scscanner.py final

Demo Video

Please go to:- http://scodescanner.info/2021/05/21/example-content/

How to run it?

Requirements

PHP, Python3

If you don't have any of these please download, then,

Upload your folder which contains files inside upload directory, find it in root folder of this tool. This is important to run this tool (Working on this to make it more smoother).
On terminal:- pip install -r requirements.txt
On terminal:- php -S localhost:80
Browse to localhost
Type the foldername which contains the PHP files

OR run it on Terminal to see if any error pops up

python scscanner.py foldername

Note: Please try not to change the main file name 'scscanner.py', otherwise we will have to change the name in upload.php file.

Feedback

I would really like to hear your thoughts on this tool. And if you wanted to contribute in this tool please let me know on Twitter agrawalsmart7 or you can send me a Pull request.

Future Work

For now, I have focused only on PHP, but in future, I will make this scanner for other languages too. Focused languages are:- PHP, ASP, PYTHON JAVA. Let me know if anyone interested.

Also, I will update this tool regularly to make it more powerful.

CamRaptor is a tool that exploits several vulnerabilities in popular DVR cameras to obtain device credentials.

118 Dec 24, 2022

SSRF search vulnerabilities exploitation extended.

This tool search for SSRF using predefined settings in different parts of a request (path, host, headers, post and get parameters).

13 Jul 4, 2021

Small python script to look for common vulnerabilities on SMTP server.

BrokenSMTP BrokenSMTP is a python3 BugBounty/Pentesting tool to look for common vulnerabilities on SMTP server. Supported Vulnerability : Spoofing - T

39 Dec 16, 2022

A script based on sqlmap that uses sql injection vulnerabilities to traverse the existence of a file

A script based on sqlmap that uses sql injection vulnerabilities to traverse the existence o

2 Nov 9, 2022

Binary check tool to identify command injection and format string vulnerabilities in blackbox binaries

Binary check tool to identify command injection and format string vulnerabilities in blackbox binaries. Using xrefs to commonly injected and format string'd files, it will scan binaries faster than Firmware Slap.

3 Nov 16, 2021

A Python Tool that uses Shodan API's to perform quick recon for vulnerabilities

Shodan Quick Recon A Python Tool that uses Shodan API's to perform quick recon for vulnerabilities Configuration You must edit the python code, and in

5 Aug 9, 2022

WpDisect is a wordpress hacking tool that finds vulnerabilities in wordpress.

wpdisect WpDisect is a wordpress hacking tool that finds misconfigurations in wordpress. Prerequisites You need to download wordpress in the wpdisect

3 Feb 20, 2022

Something I built to test for Log4J vulnerabilities on customer networks.

Log4J-Scanner Something I built to test for Log4J vulnerabilities on customer networks. I'm not responsible if your computer blows up, catches fire or

1 Dec 20, 2021

Visibility and Mitigation for Log4J vulnerabilities

Visibility and Mitigation for Log4J vulnerabilities Several scripts for the visibility and mitigation of Log4J vulnerabilities. Static Scanner - Linux

15 May 21, 2022

Comments

ValueError: Invalid format string
logger.info("Starting the scanner - " + str(time.strftime("%Y-%m-%d-%hh-%MM-%ss")) +'\n')

ValueError: Invalid format string scscanner.py line:39 I changed it to logger.info("Starting the scanner - " + str(time.strftime("%Y-%m-%d")) +'\n') But I'm not sure if it's accurate,Because there is no error in the operation, but there is no result
opened by SkinAir 6
error - doesn't run

python scscanner.py -h

Traceback (most recent call last): File "scscanner.py", line 3, in from helper import yaml_main, php_main File "/root/scodescanner/helper.py", line 2, in from typing import final ImportError: cannot import name 'final' from 'typing' (/root/.pyenv/versions/3.7.13/lib/python3.7/typing.py)

opened by svchost9913 3

Module not found - No module named 'src.php'

I am getting an error when running the command python3 scscanner.py --help

Traceback (most recent call last):
  File "/home/corrupted/scodescanner/scscanner.py", line 3, in <module>
    from helper import yaml_main, php_main
  File "/home/corrupted/scodescanner/helper.py", line 4, in <module>
    from src.php.folder_parserer import folderparser, fileparser
ModuleNotFoundError: No module named 'src.php'

opened by banner-prog 1

error - doesn't run

Hi,

this is what I get when running python3 scscanner.py


Traceback (most recent call last):
  File "scscanner.py", line 3, in <module>
    from helper import yaml_main, php_main
  File "/home/adrian/Downloads/tools/scodescanner/helper.py", line 10, in <module>
    from src.common.file_sender import jira_issue_creater, slack_issue_creator
ModuleNotFoundError: No module named 'src.common'

opened by adrian-rt 4

Releases(v3.1.0)

v3.1.0(Jun 3, 2022)
CHANGELOG-

Added yaml scanning capability

Better code

Reduces false positives

Improved command agrument list

Added new yaml rules file - rules.yaml inside rules/yaml directory.

ignore low hanging fruits with severity.

Yaml scanner have ability to give output in beautiful JSON file.

Source code(tar.gz)
Source code(zip)
v2.1.0(Apr 20, 2022)
CHANGELOG:

Improved Code by removing unnecessary code

Improved Rules.

Rules now contains the tracking of the variable, Example:

$var1 = $_GET['a']; $var2 = $_GET['b']; echo htmlspecialchars($var1 ); This will Ignore echo $var1; This will match $encryptedvalue = htmlspecialchars($var2); echo $encryptedvalue; this will ignore echo $var2; this will match

Added --check flag - Which is responsible for removing the false positives.

Addded Jira intergraion - Now we can send the output file directly to Jira instance.

Added Slack Integration - We can send file to slack channel

Source code(tar.gz)
Source code(zip)
v2.0.0(Mar 4, 2022)

This is the automated tool to scan PHP source code with integration of semgrep.
Source code(tar.gz)
Source code(zip)

Owner

GitHub Repository

A repository to detect the ARP spoofing in any devices and prevent Man in the Middle(MITM) attack using Python3

arp_spoof_detector A repository to detect the ARP spoofing in any devices and prevent Man in the Middle(MITM) attack using Python3 Usage: git clone ht

1 Oct 30, 2021

LeLeLe: A tool to simplify the application of Lattice attacks.

LeLeLe is a very simple library (300 lines) to help you more easily implement lattice attacks, the library is inspired by Z3Py (python interfa

4 Dec 14, 2021

Execution After Redirect (EAR) / Long Response Redirection Vulnerability Scanner written in python3

Execution After Redirect (EAR) / Long Response Redirection Vulnerability Scanner written in python3, It Fuzzes All URLs of target website & then scan them for EAR

9 Dec 12, 2022

A simple Log4Shell Scan with python

🐞 Log4Scan 🔧 Log4Shell 简单的主动和被动扫描脚本 Log4scan 针对header头和fuzz参数的主动批量扫描，用于大批量黑盒检测

6 Aug 04, 2022

Automatic SQL injection and database takeover tool

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of

25.7k Jan 08, 2023

Tool ini berfungsi untuk membuat virus secara instan

vbug (ID) Tool ini berfungsi untuk membuat virus secara instan. Dengan begitu pengguna vbug maker dapat menggunakannya dengan mudah dan cepat. Di dala

3 Jun 05, 2022

Trainspotting - Python Dependency Injector based on interface binding

Choose dependency injection Friendly with MyPy Supports lazy injections Supports

3 Jan 26, 2022

Exploiting CVE-2021-44228 in vCenter for remote code execution and more

Log4jCenter Exploiting CVE-2021-44228 in vCenter for remote code execution and more. Blog post detailing exploitation linked below: COMING SOON Why? P

81 Dec 20, 2022

A simple tool to audit Unix/*BSD/Linux system libraries to find public security vulnerabilities

master_librarian A simple tool to audit Unix/*BSD/Linux system libraries to find public security vulnerabilities. To install requirements: $ sudo pyth

167 Dec 19, 2022

🎻 Modularized exploit generation framework

Modularized exploit generation framework for x86_64 binaries Overview This project is still at early stage of development, so you might want to come b

30 Jan 17, 2022

Simple Python 3 script to detect the "Log4j" Java library vulnerability (CVE-2021-44228) for a list of URL with multithreading

log4j-detect Simple Python 3 script to detect the "Log4j" Java library vulnerability (CVE-2021-44228) for a list of URL with multithreading The script

187 Jan 03, 2023

SCodeScanner stands for Source Code scanner where the user can scans the source code for finding the Critical Vulnerabilities.

Related tags

Overview

SCodeScanner

Features

Test Vulnerable Folders

Demo Video

How to run it?

Requirements

Feedback

Future Work

You might also like...

CamRaptor is a tool that exploits several vulnerabilities in popular DVR cameras to obtain device credentials.

SSRF search vulnerabilities exploitation extended.

Small python script to look for common vulnerabilities on SMTP server.

A script based on sqlmap that uses sql injection vulnerabilities to traverse the existence of a file

Binary check tool to identify command injection and format string vulnerabilities in blackbox binaries

A Python Tool that uses Shodan API's to perform quick recon for vulnerabilities

WpDisect is a wordpress hacking tool that finds vulnerabilities in wordpress.

Something I built to test for Log4J vulnerabilities on customer networks.

Visibility and Mitigation for Log4J vulnerabilities

Comments

ValueError: Invalid format string

error - doesn't run

Module not found - No module named 'src.php'

error - doesn't run

Releases(v3.1.0)

v3.1.0(Jun 3, 2022)

v2.1.0(Apr 20, 2022)

v2.0.0(Mar 4, 2022)

Owner

A repository to detect the ARP spoofing in any devices and prevent Man in the Middle(MITM) attack using Python3

LeLeLe: A tool to simplify the application of Lattice attacks.

Execution After Redirect (EAR) / Long Response Redirection Vulnerability Scanner written in python3

A simple Log4Shell Scan with python

Automatic SQL injection and database takeover tool

Tool ini berfungsi untuk membuat virus secara instan

Trainspotting - Python Dependency Injector based on interface binding

Exploiting CVE-2021-44228 in vCenter for remote code execution and more

A simple tool to audit Unix/*BSD/Linux system libraries to find public security vulnerabilities

🎻 Modularized exploit generation framework

Simple Python 3 script to detect the "Log4j" Java library vulnerability (CVE-2021-44228) for a list of URL with multithreading

Now patched 0day for force reseting an accounts password

STATS305C: Applied Statistics III (Spring, 2022)

Ingest GreyNoise.io malicious feed for CVE-2021-44228 and apply null routes

EyeJo是一款自动化资产风险评估平台，可以协助甲方安全人员或乙方安全人员对授权的资产中进行排查，快速发现存在的薄弱点和攻击面。

Discord-keylogger - Discord keylogger With Python

Instagram brute force tool that uses tor as its proxy connections

This a simple tool XSS Detection Suite for CTFs games

Apache OFBiz rmi反序列化EXP(CVE-2021-26295)

AIL LeakFeeder: A Module for AIL Framework that automate the process to feed leaked files automatically to AIL