-
$cache
-
-
$CACHE_ID
-
-
$CACHE_ID
-
-
$CACHE_ID
-
Unique ID used by this plugin to refer to the general cache.
-
$CACHE_ID
-
-
$category
-
-
$category
-
-
$category_link
-
-
$category_link
-
-
$context_size
-
How many lines to include in the context returned.
-
$custom
-
-
Cache
-
-
calculate_signature
-
Signs a piece of data using a hash.
-
check_for_java
-
Checks for the current version of Java. to 1.
-
check_in_filetype
-
Checks to see if the given filename has a passed extension. to be an actual existing file.
-
check_in_filetype
-
Checks to see if the given filename has a passed extension. to be an actual existing file.
-
collapse_dir
-
This function takes all files under $start_dir and places them in $dest_dir. . . If there are any naming conflicts, the conflicts' basename will have a random (non-conflicting) 4-character string appended to it.
-
color
-
Returns an ANSI-Controlcode
Takes 1 to 3 Arguments: either 1 to 3 strings containing the name of the FG Color, style and BG color, or one array with the indices color, style or background.
-
Console_Color
-
A simple class to use ANSI Colorcodes.
-
contains
-
-
convert
-
Converts colorcodes in the format %y (for yellow) into ansi-control codes. terminals).
-
convert_to_severity
-
-
correct_slashes
-
-
create_output_handle
-
Creates an output handle to write the report to. same filename will be attempted to be placed in the temporary directory.
-
CSVReport
-
CSVReport Class
This class renders scan results as CSV.
-
cache.php
-
-
Color.php
-
-
common-analysis.php
-
-
common.php
-
-
CSVReport.php
-
-
CppCheck.php
-
-
Code-Quality.FunctionReturnsPointerToStack.php
-
-
Code-Quality.JavaScript.Obfuscated.php
-
-
Code-Quality.Null.Redundant.php
-
-
Code-Quality.Resource-Leak.GETMAIN.php
-
-
$data
-
-
$data_age
-
-
$data_size
-
-
$dbh
-
Holds a reference to the SQL Database
-
$default_extension
-
The default extension used for reports of this type.
-
$default_extension
-
The default extension used for reports of this type.
-
$default_extension
-
The default extension used for reports of this type.
-
$default_extension
-
The default extension used for reports of this type.
-
$default_extension
-
The default extension used for reports of this type.
-
$default_extension
-
The default extension used for reports of this type.
-
$default_extension
-
The default extension used for reports of this type.
-
$description
-
-
$description
-
-
$description
-
Description of this plugin (what it looks for, why it's important, how to remediate.
-
destructor
-
This function is called to de-allocate as much of the object as possible.
-
DetailedReport
-
DetailedReport Class
This class renders scan results in a very detailed, one-page-per-issue format.
-
dir_recursive
-
Recursive directory listing. at $start_dir.
-
DetailedReport.php
-
-
$event_callback_list
-
Holds the event array for callbacks
-
$executable
-
-
$executable
-
-
$executable
-
-
$executable
-
-
$executable
-
-
$ext_classes
-
-
ellipsize
-
-
endsWith
-
-
escape
-
Escapes % so they don't get interpreted as color codes
-
evict
-
-
execute
-
Executes the PMD function. process output comes back here.
-
execute
-
-
execute
-
This function should not be called, since this class is abstract. should be overridden by child classes.
-
execute
-
Executes PHPLint on each file.
-
execute
-
Executes the Pixy function. process output comes back here.
-
execute
-
The execute function renders the particular report. is an abstract class, this function should never actually be called, but should be overriden by a subclass.
-
execute
-
-
execute
-
-
execute
-
-
execute
-
-
execute
-
-
execute
-
Executes an XMLReport, with output going to $options['output']
-
execute
-
-
execute
-
-
execute
-
-
execute
-
-
execute
-
Executes a SQLLiteReport, to the output file $options['output'] or .
-
execute
-
-
execute
-
-
execute
-
-
execute
-
Executes the PMD function. process output comes back here.
-
execute
-
Executes a CSVReport, with output going to $options['output']
-
execute
-
Executes the plugin to scan a particular file.
-
execute
-
-
execute
-
-
execute
-
-
execute
-
-
execute
-
Executes a DetailedReport, with output going to $options['output']
-
execute
-
Executes the plugin to scan a particular file.
-
execute
-
-
execute
-
-
execute
-
Executes this plugin, scanning for files, placing them into an attachment.
-
execute
-
-
execute
-
-
execute
-
Executes an HTMLReport, with output going to $options['output']
-
execute
-
-
execute
-
Executes the scanning function. process output comes back here.
-
execute
-
-
execute
-
Executes an HTMLReport, with output going to $options['output']
-
execute_callback
-
Executes callbacks for a particular event.
-
$pattern_list
-
-
$plugin_file_list
-
-
$plugin_list
-
The list of available plugin functions.
-
$plugin_name
-
-
$preprocess
-
-
$pre_grep
-
-
$progress_callback
-
-
$proposed_fix
-
-
Plugin.php
-
-
PreProcessors.php
-
-
parse_command_line_arguments
-
Parses the command line arguments (argc, argv).
-
parse_ignore_file
-
-
Plugin
-
Plugin Class
This (abstract) class is the parent of all plugin classes.
-
Plugin
-
Creates a new generic Plugin.
-
PHPLint.php
-
-
Pixy.php
-
-
PMD.php
-
-
Plugin_AllTargetsFinder
-
This class looks for all scanned files, placing them in an attachment.
-
Plugin_Antic
-
The Antic Plugin uses Antic to discover potential vulnerabilities in Java or C/C++ files.
-
Plugin_authentication_weak
-
This class looks for weak authentication values, such as:
-
Plugin_BasicSummaryGrid
-
This plugin creates a basic summary grids and adds it as an attachment to the report.
-
Plugin_codequality_function_returns_pointer_to_stack
-
This class looks for code quality issues like:
-
Plugin_code_quality_javascript_obfuscated
-
This class looks for obfuscated JavaScript.
-
Plugin_code_quality_null_redundant
-
This class looks for cases in code like this:
-
Plugin_code_quality_resource_leak_getmain
-
This class looks for GETMAIN/FREEMAIN resource leaks in COBOL source code.
-
Plugin_CppCheck
-
The PMD Plugin uses PMD to discover potential vulnerabilities in .
-
Plugin_cwe_redirect_without_exit
-
This class looks for places where Response.
-
Plugin_error_handling_catch_empty
-
This class looks for empty catch blocks: try { .
-
Plugin_file_system_non_current_libraries
-
This class looks for library files (. version, or not known at all.
-
Plugin_file_system_temporary_files
-
This class looks for temporary files.
-
Plugin_FindBugs
-
The FindBugs Plugin uses the open source tool FindBugs to discover potential vulnerabilities in compiled Java code.
-
Plugin_Grep
-
The Grep Plugin is a special plugin that faciliates . are just files in the PLUGINS directory that contain necessary information to scan the target files.
-
Plugin_injection_xss_aspx
-
This class looks for XSS vulnerabilities of the form: foo = Request. foo = Request. foo = Request. foo = Request("bar") .
-
Plugin_injection_xss_jsp
-
This class looks for XSS vulnerabilities of the form: String foo = request. .
-
Plugin_injection_xss_println
-
This class looks for XSS vulnerabilities of the form: String foo = request. .
-
Plugin_JavaScriptLint
-
The JavaScriptLint Plugin uses JavaScript Lint to discover potential bugs or vulnerabilities JavaScript .
-
Plugin_JLint
-
The JLint Plugin uses JLint to discover potential vulnerabilities in .
-
Plugin_Lint4J
-
The Lint4J Plugin uses Lint4J to discover potential vulnerabilities in .
-
Plugin_logging_logviewer
-
This class looks for Java source code that might indicate an online log viewer.
-
Plugin_PHPLint
-
The PHPLint Plugin uses PHPLint to discover potential vulnerabilities in .
-
Plugin_Pixy
-
The Pixy Plugin uses Pixy to discover potential vulnerabilities in PHP 4 files.
-
Plugin_PMD
-
The PMD Plugin uses PMD to discover potential vulnerabilities in .
-
Plugin_replaceAsWithBs
-
This class looks for weak authentication values, where *.
-
Plugin_StringFinder
-
This class looks for all strings located in the source code.
-
Plugin_StrutsValidator
-
This class looks finds all calls to request. all of the variable names, and puts them in a spreadsheet.
-
Plugin_struts_membernotreset
-
This class looks for ActionMapping classes that do not reset all member variables.
-
Plugin_struts_noresetfunction
-
This class looks for ActionMapping classes that do not have reset() functions.
-
Plugin_URLFinder
-
This class looks for all URLs located in the source code.
-
put
-
-
put_file_contents
-