Skip to content

Latest commit

 

History

History
7 lines (4 loc) · 573 Bytes

brakeman.md

File metadata and controls

7 lines (4 loc) · 573 Bytes

The Brakeman Scanner is a static analysis tool that finds vulnerabilities in Ruby on Rails projects. It's internal AST and ability to follow data throughout the codebase makes it particularly strong at finding common vulnerabilities such as SQLi, XSS and RCE.

Configuration

Brakeman's configuration is complex and it parses its own brakeman.ignore file. Salus will let Brakeman reuse this file if it's present. To create one, you can use brakeman -I which lets you run an interactive scan.