Skip to content

Folders and files

NameName
Last commit message
Last commit date

Latest commit

History

4 Commits

Repository files navigation

🛡️ Vulnerability Scanner for Python Code

This project is a static code scanner written in Python that detects common insecure coding patterns.
It's built to help beginners understand how vulnerabilities can appear in source code and how to catch them early.


🔍 What It Detects

  • 🔑 Hardcoded passwords
  • ⚠️ Use of eval() and exec()
  • 🛠️ SQL queries built via string concatenation
  • 🔓 Unvalidated input() usage

📁 Project Structure

vulnerability-scanner-python/
├── scanner.py # The vulnerability scanner script
├── sample_code.py # Test script with known vulnerabilities
└── README.md # You're here!

▶️ How to Use

  1. Place any Python code you want to test in sample_code.py
  2. Run the scanner:
python scanner.py

It will output alerts for any detected patterns.


🔒 Note

This tool is for educational and demonstration purposes only.
It does not replace professional static analysis or auditing tools.


🧠 Skills Used

  • Python
  • Regex
  • Static Code Analysis
  • Cybersecurity
  • Scripting

📫 Connect With Me


🏷 Tags

pythoncybersecuritystatic-analysisvulnerability-scannerregexinfosec

About

A Python-based tool that statically scans .py files for insecure coding patterns. It detects hardcoded passwords, use of dangerous functions like eval() and exec(), potential SQL injection risks, and unvalidated input() usage. This scanner is built as part of my cybersecurity learning path, focusing on real-world vulnerability detection in code.

Resources

Stars

0 stars

Watchers

0 watching

Forks

Releases

Packages

Contributors

Languages