v0.5-2025.02.24

RIPSv0.5-CLI Release

This is the standalone PHAR release of RIPSv0.5-CLI, a command-line version of RIPS v0.5 – a static source code analyzer for detecting vulnerabilities in PHP applications.

📜 About

This release removes the web server requirement from RIPS v0.5 and provides a self-contained PHAR executable for ease of use. You can now scan PHP projects for vulnerabilities without needing a web environment.

🚀 How to Use

Basic Usage

php ripsv0.5-cli.phar /path/to/php/code [options]

Options

Option	Description
path	(Required) Path to PHP files for analysis.
--vector=<type>	(Optional) Attack type filter (xss, sql, exec, include, all). Default: all.
--verbosity=<num>	(Optional) Verbosity level (1-5). Default: 1.
--format=<type>	(Optional) Output format (readable, json). Default: readable.

Example Commands

1️⃣ Scan a PHP project

php ripsv0.5-cli.phar /var/www/html --vector=xss --format=json

2️⃣ Scan with verbose output

php ripsv0.5-cli.phar /var/www/html --vector=sql --verbosity=3

🔧 How This PHAR Was Built

This release was packaged using phar-composer:

composer global require clue/phar-composer
phar-composer build .

Alternatively, you can build it manually:

php -d phar.readonly=0 -r "\$phar = new Phar('ripsv0.5-cli.phar'); \$phar->buildFromDirectory('.'); \$phar->setStub('<?php Phar::mapPhar(); require "phar://ripsv0.5-cli.phar/cli.php"; __HALT_COMPILER();');"

📜 License

RIPS v0.5 is licensed under GPL-3.0. This release follows the same license.

---

🔗 Links

• Original RIPS v0.5 Repository
• Latest RIPSv0.5-CLI Release