Tool to detect and correct vulnerabilities in PHP web applications
...WAP detects the following vulnerabilities:
- SQL injection using MySQL, PostgreSQL and DB2 DBMS
- Reflected cross-site scripting (XSS)
- Stored XSS
- Remote file inclusion
- Local file inclusion
- Directory traversal
- Source code disclosure
- OS command injection
- PHP code injection
WAP is a static analysis tool that performs taint analysis to detect vulnerabilities, tracking malicious users inputs and checking if they reach calls of sensitive functions. It has a low rate of false positives because has implemented a data mining module to predict false positives when detects vulnerabilities.
The output of the tool is:
- shows the vulnerabilities found and how they are corrected
- new files with the corrections
A StarUML C++ Module supporting incremental reverse engineering.
This StarUML module for C++ provides practical support for legacy systems. It uses the StarUML as a KDM (Knowledge Discovery MetaModel) framework for existing systems.
The module provides an incremental reverse engineering for C++ code with a set of configurable options, such as using namespaces or folder as packages, create attributes for relations or handle properties as relations,...