graudit

graudit stands for grep rough audit and is pronouced as a single word gr like grep and audit like audit, graudit. It consists of a simple script and signature sets that allows you to find potential security flaws in source code using the GNU utility grep. It’s comparable to other static analysis applications like RATS, SWAAT and flaw-finder while keeping the technical requirements to a minimum and being very flexible.

graudit supports scanning code written in several languages; run graudit -l to see a list of the available databases.

USAGE graudit supports several options and tries to follow good shell practices. For a list of the options you can run graudit -h or see below. The simplest way to use graudit is; graudit /path/to/scan

DEPENDENCIES Required: bash, grep, sed

DOCUMENTATION See the readme file and frequently asked questions.

Download and source graudit is available from github, you can check the github project page https://github.com/wireghoul/graudit