VisualCodeGrepper

最新推荐文章于 2025-08-01 10:40:47 发布

原创最新推荐文章于 2025-08-01 10:40:47 发布 · 4k 阅读

0 ·

CC 4.0 BY-SA版权

安全性测试同时被 2 个专栏收录

112 篇文章

订阅专栏

开源测试工具

89 篇文章

订阅专栏

VisualCodeGrepper是一款专门针对C/C++、Java、C#、VB.NET和PL/SQL语言的自动化代码安全审查工具。它提供了一个配置文件来搜索特定的不良函数或文本，尝试在注释中找到约20个指示错误代码的短语，并通过图表展示代码、空白、注释、'待做'风格注释和错误代码的比例。

VisualCodeGrepper
http://sourceforge.net/projects/visualcodegrepp/files/?source=navbar
VCG is an automated code security review tool that handles C/C++, Java, C#, VB and PL/SQL. It has a few features that should hopefully make it useful to anyone conducting code security reviews, particularly where time is at a premium:
1. In addition to performing some more complex checks it also has a config file for each language that basically allows you to add any bad functions (or other text) that you want to search for
2. It attempts to find a range of around 20 phrases within comments that can indicate broken code (ToDo, FixMe, Kludge, etc.)
3. It provides a nice pie chart (for the entire codebase and for individual files) showing relative proportions of code, whitespace, comments, ToDo style comments and bad code

用C#写的
不支持命令行