pmd

PMD - 源代码分析器 PMD 是一个可扩展的多语言静态代码分析器。它能发现常见的编程缺陷，例如未使用的变量、空的 catch 块、不必要的对象创建等。它主要专注于 Java 和 Apex ，但 支持其他 16 种语言 。它内置了 400 多条规则 。可以通过自定义规则进行扩展。它使用 JavaCC 和 Antlr 解析源文件为抽象语法树（AST），并针对这些 AST 运行规则以发现违规。规则可以用 Java 或 XPath 查询编写。 目前，PMD 支持 Java、JavaScript、Salesforce.com Apex 和...

Introducing Microsoft Application Inspector

Modern software development practices often involve building applications from hundreds of existing components, whether they’re written by another team in your organization, an external vendor, or someone in the open source community. Reuse has great benefits, including time-to-market, quality, a...

Fortify SCA analysis code vulnerabilities the whole solution-vulnerability warning-the black bar safety net

The last describes the use of FindBugs-assisted analysis of code vulnerability, this time a tools: Fortify SCA Demo 4.0.0。 Fortify is a security aspect of the quite famous company, there is not much to say. First introduce the protagonist: the Fortify SCA Demo 4.0.0, although do not know now...

Microsoft Source Code Analyzer for SQL Injection 1.3 Improper Permissions

Exploit for windows platform in category local exploits Vendor: Microsoft Corp. Product web page: http://www.microsoft.com Affected version: 1.3.30601.30705 summary: Microsoft Source Code Analyzer for SQL Injection is a static code analysis tool for finding SQL Injection vulnerabilities in ASP...

Microsoft Source Code Analyzer for SQL Injection 1.3 - Improper Permissions

Microsoft Source Code Analyzer for SQL Injection 1.3 - Improper Permissions Microsoft Source Code Analyzer for SQL Injection 1.3 Improper Permissions Vendor: Microsoft Corp. Product web page: http://www.microsoft.com Affected version: 1.3.30601.30705 summary: Microsoft Source Code Analyzer for SQ...

Microsoft Source Code Analyzer For SQL Injection 1.3 Improper Permissions

Microsoft Source Code Analyzer for SQL Injection 1.3 Improper Permissions Vendor: Microsoft Corp. Product web page: http://www.microsoft.com Affected version: 1.3.30601.30705 summary: Microsoft Source Code Analyzer for SQL Injection is a static code analysis tool for finding SQL Injection...

Microsoft Source Code Analyzer for SQL Injection 1.3 Improper Permissions

Summary Microsoft Source Code Analyzer for SQL Injection is a static code analysis tool for finding SQL Injection vulnerabilities in ASP code. Customers can run the tool on their ASP source code to help identify code paths that are vulnerable to SQL Injection attacks. Description The package...