Vulnxpose

Scans C/C++ source code files for known vulnerabilities including buffer overflows, race conditions, weak crypto, chroot jail configs ... & more).

Written by Rick Flores @nanotechz9l

Pre Reqs

You MUST install the rainbow gem for the pretty colorized output seen above, and the english gem for outputting line numbers when errors are found!

gem install rainbow english

Usage

./vulnxpose.rb vuln.c

Features

• Scans C/C++ files for known vulnerabilities (buffer overflows, race conditions, weak crypto, chroot jail config... & more).
• Provides a calculated score based on dangerous functions found in the source code.
• Provides vulnerability information, and code recommendations.

Requirements

• Tested on ruby version/s:
  • ruby 2.0.0p0 (2013-02-24 revision 39474)
  • ruby 1.9.3

History

• 10/05/2013 - I WILL NO LONGER UPDATE THIS README file. VISIT THE ISSUES PAGE FOR ALL HISTORY/REVISION INFO!!

•        - https://github.com/nanotechz9l/Source-code-analyzer/issues?page=1&state=open
  

• 10/04/2013 - Minor update to user recommendations at the end of the script.

• 10/04/2013 - Updated dfuncs to include all flawfinders 160 dangerous functions

• 10/03/2013 - Added line number output.

• 10/03/2013 - Added all 160 flawfinder dangerous functions.

• 10/03/2013 - Added simple regex search to scan multiple functions vs one.

• 10/02/2013 - Wrote the quick PoC.

BUG LIST:

• I WILL NO LONGER UPDATE THIS BUG SECTION. TO STAY UP TO DATE ON BUGS/ENHANCEMENTS VISIT THE GITHUB ISSUE PAGE:

• https://github.com/nanotechz9l/Source-code-analyzer/issues?state=open

• SQUASHED - Improve the regex search (include all 160 flawfinder functions), and test

• SQUASHED - Add vulnerability information, and recommendations.

• SQUASHED - Improve the regex search findings output

• SQUASHED - Add line numbers for function in question to vuln info, & recommendations!

• SQUASHED - Update dfuncs to include the newly added c_rules 160 dangerous functions (makes scoring 100% accurate)!

Credits

• Rick Flores (@nanotechz9l) -- 0xnanoquetz9l[--at--]gmail.com

License

This code is free software; you can redistribute it and/or modify it under the terms of the new BSD License.