diff --git a/pentesting/pentesting-web/code-review-tools.md b/pentesting/pentesting-web/code-review-tools.md index c7b430682..f3ac7b590 100644 --- a/pentesting/pentesting-web/code-review-tools.md +++ b/pentesting/pentesting-web/code-review-tools.md @@ -2,7 +2,7 @@ ## General -[**https://owasp.org/www-community/Source\_Code\_Analysis\_Tools**](https://owasp.org/www-community/Source_Code_Analysis_Tools#) +[**https://owasp.org/www-community/Source\_Code\_Analysis\_Tools**](https://owasp.org/www-community/Source\_Code\_Analysis\_Tools#) ```bash https://www.sonarqube.org/downloads/ @@ -20,20 +20,20 @@ https://libraries.io/pypi/detect-secrets ## JavaScript -```text +``` https://jshint.com/ https://github.com/jshint/jshint/ ``` ## NodeJS -```text +``` https://github.com/ajinabraham/nodejsscan ``` ## Electron -```text +``` https://github.com/doyensec/electronegativity ``` @@ -69,17 +69,17 @@ echo "Main-Class: test" > META-INF/MANIFEST.MF jar cmvf META-INF/MANIFEST.MF test.jar test.class ``` -| Task | Command | -| :--- | :--- | -| Execute Jar | java -jar \[jar\] | -| Unzip Jar | unzip -d \[output directory\] \[jar\] | -| Create Jar | jar -cmf META-INF/MANIFEST.MF \[output jar\] \* | -| Base64 SHA256 | sha256sum \[file\] \| cut -d' ' -f1 \| xxd -r -p \| base64 | -| Remove Signing | rm META-INF/_.SF META-INF/_.RSA META-INF/\*.DSA | -| Delete from Jar | zip -d \[jar\] \[file to remove\] | -| Decompile class | procyon -o . \[path to class\] | -| Decompile Jar | procyon -jar \[jar\] -o \[output directory\] | -| Compile class | javac \[path to .java file\] | +| Task | Command | +| --------------- | --------------------------------------------------------- | +| Execute Jar | java -jar \[jar] | +| Unzip Jar | unzip -d \[output directory] \[jar] | +| Create Jar | jar -cmf META-INF/MANIFEST.MF \[output jar] \* | +| Base64 SHA256 | sha256sum \[file] \| cut -d' ' -f1 \| xxd -r -p \| base64 | +| Remove Signing | rm META-INF/_.SF META-INF/_.RSA META-INF/\*.DSA | +| Delete from Jar | zip -d \[jar] \[file to remove] | +| Decompile class | procyon -o . \[path to class] | +| Decompile Jar | procyon -jar \[jar] -o \[output directory] | +| Compile class | javac \[path to .java file] | ## Go @@ -87,7 +87,10 @@ jar cmvf META-INF/MANIFEST.MF test.jar test.class https://github.com/securego/gosec ``` -### PHP +## PHP [Psalm](https://phpmagazine.net/2018/12/find-errors-in-your-php-applications-with-psalm.html) and [PHPStan](https://phpmagazine.net/2020/09/phpstan-pro-edition-launched.html). +## Solidity + +* [https://www.npmjs.com/package/solium](https://www.npmjs.com/package/solium)