Awesome

this script will scan your code

the script can find

1. check_file_upload issues
2. host_header_injection
3. SQl injection
4. insecure deserialization
5. open_redirect
6. SSRF
7. XSS
8. LFI
9. command_injection

features

1. fast
2. simple report

usage:

python code.py file.php -this will scan one file
python code.py   -this will scan full folder (.)
python code.py path -will scan all subfolders and files

output

<img src=img/banner.PNG >

<img src=./img/recap.PNG> <img src=img/php_server.PNG >

twitter: kira_321k