presidentbeef/brakeman
View on GitHub ↗ ★ 7,292 Ruby
A static analysis security vulnerability scanner for Ruby on Rails applications
9 mentions on Hacker News by 9 people: 4 stories, 5 comments · first 2012-03-05 · latest 2020-02-05
20082026
-
https://github.com/presidentbeef/brakeman link to mentioned app for those interested.
comment by thrownaway954 · 2020-02-05 · in Attacking Ruby on Rails applications (2016) -
▲ 2
Brakeman security scanner no longer open sourcestory by abraham · 2019-01-30 · 0 comments
-
▲ 3
Synopsys bought security scanner Brakeman and removed its open source licensestory by dankohn1 · 2019-01-23 · 2 comments
-
▲ 2
Brakeman Static Analysis Security Scanner Is Now Under Creative Commons Licensestory by altharaz · 2018-06-30 · 0 comments
-
…lot of information specific to your language, like http://guides.rubyonrails.org/security.html and https://github.com/presidentbeef/brakeman to look at real apps, to see what can go wrong.
comment by justsorneguy · 2016-09-16 · in Ask HN: Best route from developer to pentester -
…the codebase without running the code. Under the hood, it's based on the Brakeman open source tool: https://github.com/presidentbeef/brakeman It looks for all the big issues (XSS, CSRF, SQLi). In many cases it means keeping track of where…
comment by brynary · 2013-03-19 · in Code Climate launches Security Monitor -
…it should check the Gemfile also. Seems like a good place for it. The opinion is mixed though. https://github.com/presidentbeef/brakeman/issues/276 A complementary command-line tool would be fine too.
comment by boonedocks · 2013-02-28 · in Don't find out about Ruby vulnerabilities through Hacker News and Twitter -
A couple that I know of which are based on the security side of things are Brakeman ( https://github.com/presidentbeef/brakeman ) and Scanny ( https://github.com/openSUSE/scanny ) on the open source side. On the commercial side I know…
comment by raesene2 · 2012-09-20 · in John Carmack on Static Code Analysis -
▲ 3
Brakeman: RoR Vulnerability Scannerstory by toni · 2012-03-05 · 0 comments