This project is a static code scanner written in Python that detects common insecure coding patterns.
It's built to help beginners understand how vulnerabilities can appear in source code and how to catch them early.
- π Hardcoded passwords
β οΈ Use ofeval()
andexec()
- π οΈ SQL queries built via string concatenation
- π Unvalidated
input()
usage
vulnerability-scanner-python/
βββ scanner.py # The vulnerability scanner script
βββ sample_code.py # Test script with known vulnerabilities
βββ README.md # You're here!
- Place any Python code you want to test in
sample_code.py
- Run the scanner:
python scanner.py
It will output alerts for any detected patterns.
This tool is for educational and demonstration purposes only.
It does not replace professional static analysis or auditing tools.
- Python
- Regex
- Static Code Analysis
- Cybersecurity
- Scripting
- GitHub: Lithish-7
- LinkedIn: lithishxsec
python
cybersecurity
static-analysis
vulnerability-scanner
regex
infosec