News Feed
Sections




News Archive
Looking for more information on how to do PHP the right way? Check out PHP: The Right Way

O'Reilly:
Using Google Code Search to Find Security Bugs
October 13, 2006 @ 10:24:00

On the O'Reilly OnLamp.com site, there's a bit more in-depth look at using the (now infamous) Google Code Search to locate issues with scripts that have been collected over time.

I've written about using Google to find security flaws in the past. However, thanks to Google Code Search, it is now easier to scan publicly available source code for potential security issues. The idea is query Google Code Search using techniques previously reserved for local static code analysis.

The examples he gives include a search for SQL injection in a Java application, a SQL injection in a PHP application, and a cross-site scripting problem in a PHP app blindly echoing out the user's input.

He also includes a few links to some code analysis tools that can be used to help prevent some of these issues - Flawfinder, RATS, and SWAAT

1 comment voice your opinion now!
google search find security bugs analysis tool google search find security bugs analysis tool


blog comments powered by Disqus

Similar Posts

Jim Wynia's Blog: Tracking Accomplishments with PHP, Google Calendar and Zend Framework

Antony Dovgal's Blog: PECL/sphinx - fast fulltext search made easy

Brian Swan's Blog: Windows Azure Command Line Tools for PHP Available in Web Platform Installer

VoucherTrader.co.uk Blog: A Further Problem With PHP Session IDs and Google

The Bakery: Advanced Pagination (1.2)


Community Events





Don't see your event here?
Let us know!


interview bugfix release introduction package install opinion community api framework symfony tips series podcast library list deployment language voicesoftheelephpant laravel

All content copyright, 2014 PHPDeveloper.org :: info@phpdeveloper.org - Powered by the Solar PHP Framework