presidentbeef/brakeman
View on GitHub ↗ ★ 7,292 Ruby
A static analysis security vulnerability scanner for Ruby on Rails applications
9 mentions on Hacker News by 9 people: 4 stories, 5 comments · first 2012-03-05 · latest 2020-02-05
20082026
-
https://github.com/presidentbeef/brakeman link to mentioned app for those interested.
comment by thrownaway954 · 2020-02-05 · in Attacking Ruby on Rails applications (2016) -
…lot of information specific to your language, like http://guides.rubyonrails.org/security.html and https://github.com/presidentbeef/brakeman to look at real apps, to see what can go wrong.
comment by justsorneguy · 2016-09-16 · in Ask HN: Best route from developer to pentester -
…the codebase without running the code. Under the hood, it's based on the Brakeman open source tool: https://github.com/presidentbeef/brakeman It looks for all the big issues (XSS, CSRF, SQLi). In many cases it means keeping track of where…
comment by brynary · 2013-03-19 · in Code Climate launches Security Monitor -
…it should check the Gemfile also. Seems like a good place for it. The opinion is mixed though. https://github.com/presidentbeef/brakeman/issues/276 A complementary command-line tool would be fine too.
comment by boonedocks · 2013-02-28 · in Don't find out about Ruby vulnerabilities through Hacker News and Twitter -
A couple that I know of which are based on the security side of things are Brakeman ( https://github.com/presidentbeef/brakeman ) and Scanny ( https://github.com/openSUSE/scanny ) on the open source side. On the commercial side I know…
comment by raesene2 · 2012-09-20 · in John Carmack on Static Code Analysis