vuln-scan - A Python-based static vulnerability scanner for PH

项目说明

PHP Scanner

This is a PHP scanner designed to identify common security such as XSS, SQLi, RCE, and others, using regular expressions.

Features

Scans PHP files to identify security .

Detects types of , including:

- XSS (Cross-Site Scripting)
- Eval
- SQLi (SQL Injection)
- RCE (Remote Code Execution)
- LFI/RFI (Local/Remote File Inclusion)
- File Operations
- Unserialize
- Deprecated
- Dynamic Code
- Info Leak
- Security Misconfiguration
- Session Fixation
- Header Injection
- Manual Deserialization
- Insecure Random
- Weak Hashing
- Open Redirect
- Dynamic Class Instantiation
- Errors
- Globals Misuse
- Hardcoded Secrets / Path
- No
- Regex Problem
- PowerShell Commands

Additional Features Noted in Code

✅ Support for .gitignore: Files ignored by .gitignore are not scanned unless explicitly o.

✅ Flag --all or -a: Forces the scanner to check all PHP files, e ignored by .gitignore.

✅ Progress bar: Shows li during scanning.

✅ Color-coded output: Highlights in red for easy identification.

✅ Multiple output formats: Supports saving results in JSON or plain text.

Features

Scans PHP files to identify security .

Detects types of , including:

- XSS (Cross-Site Scripting)
- Eval
- SQLi (SQL Injection)
- RCE (Remote Code Execution)
- LFI/RFI (Local/Remote File Inclusion)
- File Operations
- Unserialize
- Deprecated
- Dynamic Code
- Info Leak
- Security Misconfiguration
- Session Fixation
- Header Injection
- Manual Deserialization
- Insecure Random
- Weak Hashing
- Open Redirect
- Dynamic Class Instantiation
- Errors
- Globals Misuse
- Hardcoded Secrets / Path
- No
- Regex Problem
- PowerShell Commands

Requirements

Python 3.x

Python Libraries:

- re (included in Python by default)
- os (included in Python by default)
- argparse (included in Python by default)

Installation

1. Clone the repository:

2. (Optional) Create a en to isolate the project dependencies:

How to Use

Run the Python script, passing the paths of the PHP files or directories to scan:

Example:

The scanner will search the provided files and directories for known using predefined regular expressions.

Output Format

The output will be a list of detected , including the file name, line number, line content, and the type of found:

Contributing

1. Fork this repository.
2. Create a branch for your changes (git checkout -b feature/new-).
3. Commit your changes (git commit -am 'Add new ').
4. Push to the remote repository (git push origin feature/new-).
5. Open a pull request.

License

This project is licensed under the MIT License - see the LICENSE file for details.

项目信息

开发语言：Python

Star 数：8

技术要点

该项目属于安全软件方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕A Python-based static vulnerability scanner for PHP files that detects common issues like XSS, SQLi, and RCE展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。