ApplicationInspector:一款功能强大的软件源代码分析与审计工具
来源:岁月联盟
时间:2020-03-16
扫描一个项目目录,不需要输出“output.html”文件(默认):
dotnet AppInspector.dll analyze -s /home/user/myproject
添加自定义扫描规则:
dotnet AppInspector.dll analyze -s /home/user/myproject -r /my/rules/directory -r /my/other/rules
JSON格式输出:
dotnet AppInspector.dll analyze -s /home/user/myproject -f json
Tagdiff命令
如果你需要使用不同的标签(功能)来分析、比对和报告两个不同的项目,比如说两个不同版本的项目,你可以使用tagdiff命令:
Usage: dotnet AppInspector.dll tagdiff [arguments] [options]
Arguments:
--src1 Required. Source 1 to compare (required)
--src2 Required. Source 2 to compare (required
-t, --test-type Type of test to run [equality|inequality]. Default = equality
-r, --custom-rules-path Custom rules path
-i, --ignore-default-rules Ignore default rules bundled with application. Default = false
-o, --output-file-path Path to output file
-x, --console-verbosity Console verbosity [high|medium|low]. Default = medium
-l, --log-file-path Log file path
-v, --log-file-level Log file level [error|trace|debug|info]. Default = error
查看不同项目对比结果的命令如下:
dotnet AppInspector.dll tagdiff --src1 /home/user/project1 --src2 /home/user/project2
基本使用1:
dotnet AppInspector.dll tagdiff --src1 /home/user/project1 --src2 /home/user/project2 -t equality
基本使用2:
dotnet AppInspector.dll tagdiff --src1 /home/user/project1 --src2 /home/user/project2 -t inequality
TagTest命令
该命令用于识别目标项目中是否存在指定的一系列规则,比如说,你想知道目标应用中是否使用了某个加密算法,就可以使用该命令了。
命令参数如下:
Usage: dotnet AppInspector.dll tagtest [arguments] [options
Arguments:
-s, --source-path Required. Source to test (required)
-t, --test-type Test to perform [rulespresent|rulesnotpresent]. Default = rulespresent
-r, --custom-rules-path Custom rules path
-i, --ignore-default-rules Ignore default rules bundled with application. Default = true
-o, --output-file-path Path to output file
-x, --console-verbosity Console verbosity [high|medium|low]. Default = medium
-l, --log-file-path Log file path
-v, --log-file-level Log file level
使用下列命令即可查看目标项目中是否存在某规则集:
dotnet AppInspector.dll tagtest -s /home/user/project1 -r /home/user/myrules.json
基本使用1:
dotnet AppInspector.dll tagtest -s /home/user/project1 -r /home/user/myrules.json -t rulespresent
基本使用2:
dotnet AppInspector.dll tagtest -s /home/user/project1 -r /home/user/myrules.json -t rulesnotpresent
ExportTags命令
该命令可以输出指定标签的规则集模式:
Usage: dotnet AppInspector.dll exporttags [arguments] [options]
Arguments:
-r, --custom-rules-path Custom rules path
-i, --ignore-default-rules Ignore default rules bundled with application. Default = false
-o, --output-file-path Path to output file
-x, --console-verbosity Console verbosity [high|medium|low]. Default = medium
输出默认规则标签至终端:
dotnet AppInspector.dll exporttags
使用输出文件:
dotnet AppInspector.dll exporttags -o /home/user/myproject/exportags.txt
使用自定义规则以及输出文件:
dotnet AppInspector.dll exporttags -r /home/user/myproject/customrules -o /hom/user/myproject/exportags.txt
Verify命令
该命令可以验证规则集是否兼容,并保证导入和分析时不会发生错误:
Usage: dotnet AppInspector.dll verifyrules [arguments]
上一页 [1] [2] [3] 下一页
下一篇:避免凭证转储攻击的5个技巧