RIPS is a static code analysis tool for the automated detection of security vulnerabilities in PHP applications. It was released 2010 during the Month of PHP Security (www.php-security.org).
NOTE: RIPS 0.5 development is abandoned. A complete rewrite with OOP support and higher precision is available at https://www.ripstech.com/next-generation/
Features
- detect XSS, SQLi, File disclosure, LFI/RFI, RCE vulnerabilities and more
- 5 verbosity levels for debugging your scan results
- mark vulnerable lines in source code viewer
- highlight variables in the code viewer
- user-defined function code by mouse-over on detected call
- active jumping between function declaration and calls
- list of all user-defined functions (defines and calls), program entry points (user input) and scanned files (with includes) connected to the source code viewer
- graph visualization for files and includes as well as functions and calls
- create CURL exploits for detected vulnerabilties with few clicks
- visualization, description, example, PoC, patch and securing function list for every vulnerability
- 7 different syntax highlighting colour schemata
- display scan result in form of a top-down flow or bottom-up trace
- only minimal requirement is a local webserver with PHP and a browser (tested with Firefox)
- regex search function
Project Samples
License
GNU General Public License version 3.0 (GPLv3)
You Might Also Like
Cahoot is the next-generation eCommerce order fulfillment network powered by our patented and easy-to-use shipping software. With 100+ eCommerce fulfillment centers throughout the United States, we offer nationwide 1-day and 2-day delivery to over 90% of the US population. Cahoot provides reliable and affordable US fulfillment services for ALL sales channels, including leading marketplaces such as Amazon, eBay, and Walmart and leading eCommerce platforms and shopping carts, including Shopify, BigCommerce, and Magento. Cahoot is the world's first peer-to-peer eCommerce fulfillment network that provides ultrafast order fulfillment at 30% lower cost than traditional 3PLS.
Rate This Project
Login To Rate This Project
User Reviews
There are no 3 star reviews.