joubin jabbari
  • home
  • blog
  • work
  • reading
  • photography
  • contact
  • resume

VisualCodeGrepper on macOS

VisualCodeGrepper is a SAST (Static Application Security Testing) tool written in Visual Basic. However, it supports the scanning and reporting on the following languages!

  • C/C++
  • Java
  • C#
  • VB
  • PL/SQL

Since its free, I decided to run against an application I've been working on for the past few months. I've been periodically going though and fixing vulnerabilities I find using FindSecBug and since I wasn't finding anything new, I thought I'd give another tool a try.

install brew

Brew is an awesome package manger for macOS. If you've used apt-get or yum before, this is that but for macOS.

install wine

Wine is another awesome tool which lets you emulate a windows subsystem withought making you deal with windows.

install VisualCodeGrepper

On the command prompt run wine PATH_TO_VCG_Installer Imgur

Imgur

Imgur

Imgur

Get to the install dir

Imgur

Help if you need it

Imgur

Run the Scan

visualcodegrepper.exe -c -export Z:\Users\joubin\Desktop\airbnb.xml -l JAVA -t Z:\Users\joubin\Downloads\scanthis\lottie\src

Profit

Then you get a result of something that looks like:


February 08 2017

Joubin Jabbari | Github | Twitter