Practical Security Automation and Testing

White-box search with GREP-like tools

There may be scenarios where we need to search specific patterns or keywords to identify potential issues. The GREP tool in Linux is a common search tool for source code or plain text configurations. For code-security reviews, here are some security scanning tools that provide GREP-like search functionality:

Search tools	Key characteristics
Code Review Audit Script Scanner	This is a one-shell script that includes all common code security issue patterns. No other dependency is required to run the script. https://github.com/floyd-fuh/crass/blob/master/grep-it.sh
Grep Rough Audit	This is a shell script that will read signatures for potential security issues in source code https://github.com/wireghoul/graudit/ ...