Activity for VisualCodeGrepper V2.3.2

VisualCodeGrepper V2.3.2 released /VCG-Setup.msi

VisualCodeGrepper V2.3.2 — Wed, 05 Jul 2023 12:49:02 -0000

VisualCodeGrepper V2.3.1 updated /VCG-Setup.msi

VisualCodeGrepper V2.3.1 — Tue, 04 Jul 2023 08:44:03 -0000

VisualCodeGrepper V2.3.1 updated /README.txt

VisualCodeGrepper V2.3.1 — Tue, 04 Jul 2023 08:44:03 -0000

VisualCodeGrepper V2.3.1 released /VCG-Setup.msi

VisualCodeGrepper V2.3.1 — Sun, 14 May 2023 15:28:03 -0000

VisualCodeGrepper V2.2.0 released /README.txt

VisualCodeGrepper V2.2.0 — Sun, 14 May 2023 11:05:02 -0000

VisualCodeGrepper V2.2.0 released /VCG-Setup.msi

VisualCodeGrepper V2.2.0 — Sun, 14 May 2023 11:05:02 -0000

VisualCodeGrepper V2.2.0 released /VCG-Setup.msi

VisualCodeGrepper V2.2.0 — Thu, 31 Oct 2019 12:44:03 -0000

VisualCodeGrepper V2.2.0 released /README.txt

VisualCodeGrepper V2.2.0 — Thu, 31 Oct 2019 11:14:02 -0000

kiny.shiue posted a comment on discussion General Discussion

kiny.shiue — Wed, 31 Jul 2019 07:13:48 -0000

Hi , When we full scan package body , we will get the below error message and we have no idea why get the standard error . the failure to use authid current_user allows a user to run functions from this package in the role of the definer

phillip andrews posted a comment on discussion General Discussion

phillip andrews — Fri, 02 Jun 2017 13:03:02 -0000

I am attempting to demonstrate that Page ValidateRequest="false" is detected by VCG. I have this in my default.aspx file in the project I am scanning, but it is not being detected. I am using the standard csfunctions.conf file tat has the following in; <%@ ValidateRequest="false" %>=>[2]The application appears to deliberately de-activate the default .NET input validation functionality. However it is not reporting as being detected. Any ideas? Regards Phill

Sri modified a comment on discussion General Discussion

Sri — Fri, 03 Mar 2017 15:44:52 -0000

Hello, I'm trying to find a tool that will scan code for the use of SHA1 encryption...

Sri posted a comment on discussion General Discussion

Sri — Fri, 03 Mar 2017 15:44:36 -0000

Hello, I'm trying to find a tool that will scan code for the use of SHA1 encryption...

Rakesh modified a comment on discussion General Discussion

Rakesh — Tue, 21 Feb 2017 05:05:19 -0000

Can we run VisualCodeGrepper on Linux? I am trying to use it in CentOS which is running...

Rakesh posted a comment on discussion General Discussion

Rakesh — Tue, 21 Feb 2017 05:02:39 -0000

Can we run VisualCodeGrepper on Linux? I am trying to use it in CentOS which is running...

Arthur Lin posted a comment on discussion General Discussion

Arthur Lin — Sat, 26 Nov 2016 02:40:15 -0000

Dear SIR I used VCG to scan my C# code, and got the result of 7 counts of severity...

NetX123 posted a comment on discussion General Discussion

NetX123 — Tue, 23 Aug 2016 19:34:02 -0000

In the Summary Table the memory based detections such as "new without delete" "mallloc...

NetX123 posted a comment on discussion General Discussion

NetX123 — Tue, 23 Aug 2016 19:27:53 -0000

Sorry to bombard you with bug reports, but here's some more observations: 1) strcat...

NetX123 posted a comment on discussion General Discussion

NetX123 — Tue, 23 Aug 2016 15:23:32 -0000

Performing a Full Scan, does not refresh the Results Tab. So for example after performing...

NetX123 posted a comment on discussion General Discussion

NetX123 — Tue, 23 Aug 2016 15:17:57 -0000

Hi, I've just tried your application and found that it is reporting many false positive...

Rajesh Chilambi posted a comment on discussion General Discussion

Rajesh Chilambi — Fri, 24 Jun 2016 15:38:27 -0000

Does this tool detect places where we do <%= in asp.net. This also leads to XSS and...

VisualCodeGrepper V2.1.0 released /setup.exe

VisualCodeGrepper V2.1.0 — Tue, 19 Apr 2016 13:21:02 -0000

VisualCodeGrepper V2.0.2 released /setup.exe

VisualCodeGrepper V2.0.2 — Tue, 19 Apr 2016 08:38:02 -0000

N1ckDunn posted a comment on discussion General Discussion

N1ckDunn — Fri, 06 Mar 2015 16:09:14 -0000

Thanks Nikki. I haven't put in any C# checks for integer issues. I'm assuming you...

Nikki posted a comment on discussion General Discussion

Nikki — Fri, 06 Mar 2015 14:41:37 -0000

Does VCG (C#) check for Integer Arithmetic Issues? Awesome tool too!

N1ckDunn posted a comment on discussion General Discussion

N1ckDunn — Tue, 13 Jan 2015 19:51:08 -0000

Yet another bugfix to prevent failure to import bad functions from config files when...

N1ckDunn posted a comment on discussion General Discussion

N1ckDunn — Tue, 13 Jan 2015 19:51:01 -0000

Yet another bugfix to prevent failure to import bad functions from config files when...

N1ckDunn modified a comment on discussion General Discussion

N1ckDunn — Mon, 12 Jan 2015 20:41:24 -0000

The latest release, V2.0.1, is a bug-fix to correct issues with scanning for banned...

N1ckDunn posted a comment on discussion General Discussion

N1ckDunn — Mon, 12 Jan 2015 20:30:21 -0000

The latest release is a bug-fix to correct issues with scanning for banned functions...

N1ckDunn posted a comment on discussion General Discussion

N1ckDunn — Wed, 07 Jan 2015 15:55:00 -0000

I've (finally) put the VCG source code here: https://github.com/nccgroup/VCG

N1ckDunn posted a comment on discussion General Discussion

N1ckDunn — Fri, 19 Dec 2014 08:45:42 -0000

I'll take a look at implementing that in the near future. I'm aware that bigger projects...

N1ckDunn posted a comment on discussion General Discussion

N1ckDunn — Fri, 19 Dec 2014 08:44:10 -0000

Hi Raymond That should be fairly simple so I'll add it in to the next release. Thanks...

Raymond posted a comment on discussion General Discussion

Raymond — Mon, 15 Dec 2014 19:25:07 -0000

Would love an option for the "Banned/Insecure Functions" to display the line of code...

Alex Bereznyi posted a comment on discussion General Discussion

Alex Bereznyi — Thu, 11 Dec 2014 20:06:37 -0000

Is there an option for multi-threaded processing? It would be very useful for scanning...

N1ckDunn posted a comment on discussion General Discussion

N1ckDunn — Wed, 05 Nov 2014 18:35:46 -0000

The version which was uploaded yesterday did not write out correctly to the command...

N1ckDunn posted a comment on discussion General Discussion

N1ckDunn — Wed, 05 Nov 2014 18:33:16 -0000

Hi Todd The application is written with VisualStudio so any errors like this are...

oakleyx posted a comment on discussion General Discussion

oakleyx — Tue, 04 Nov 2014 22:19:28 -0000

Awesome! Thanks!

toddgrotenhuis posted a comment on discussion General Discussion

toddgrotenhuis — Sun, 02 Nov 2014 19:51:16 -0000

Extra information: I was working in a Windows VM which could see the OSX files (where...

toddgrotenhuis posted a comment on discussion General Discussion

toddgrotenhuis — Sun, 02 Nov 2014 19:40:33 -0000

I keep getting this error when trying to load a file, but and not seeing anything...

N1ckDunn posted a comment on discussion General Discussion

N1ckDunn — Wed, 29 Oct 2014 21:37:09 -0000

Hi I'm currently testing the latest version which should include commandline parameters...

oakleyx posted a comment on discussion General Discussion

oakleyx — Wed, 29 Oct 2014 15:54:58 -0000

Hi, Any updates on this? This would be a great feature. We would like to implement...

N1ckDunn posted a comment on discussion General Discussion

N1ckDunn — Sat, 04 Oct 2014 20:01:29 -0000

Hi Raymond Firstly, thanks for the compliment. The 'mark as false findings' phrase...

Raymond posted a comment on discussion General Discussion

Raymond — Thu, 25 Sep 2014 00:20:34 -0000

First and foremost thanks for a great product - one of my favorite open source tools...

Patrick Tucker posted a comment on discussion General Discussion

Patrick Tucker — Mon, 08 Sep 2014 12:30:21 -0000

That would be great!

N1ckDunn posted a comment on discussion General Discussion

N1ckDunn — Wed, 03 Sep 2014 13:14:01 -0000

Hi Pat I'll take a look at implementing a check for this in the next release. Ni...

Patrick Tucker posted a comment on discussion General Discussion

Patrick Tucker — Tue, 02 Sep 2014 16:51:25 -0000

We used VCG 1.6.1.0 to scan some code that we inherited to look for security vulnerabilities...

N1ckDunn posted a comment on discussion General Discussion

N1ckDunn — Wed, 09 Jul 2014 18:09:29 -0000

Thanks for the information Rodrigo. I'm currently working on bug-fixes and new features...

N1ckDunn posted a comment on discussion General Discussion

N1ckDunn — Wed, 09 Jul 2014 18:07:17 -0000

Hi Rodrigo It makes a fairly simple check for Struts validation in any XML files...

Rodrigo Ruiz modified a comment on discussion General Discussion

Rodrigo Ruiz — Tue, 01 Jul 2014 12:59:47 -0000

Hi, VCG generates a lot of results with the following message: The application appears...

Rodrigo Ruiz posted a comment on discussion General Discussion

Rodrigo Ruiz — Tue, 01 Jul 2014 12:59:19 -0000

Hi, VCG generates a lot of results with the following message: The application appears...

Rodrigo Ruiz posted a comment on discussion General Discussion

Rodrigo Ruiz — Tue, 01 Jul 2014 12:42:59 -0000

Hi, First things first, thanks for this tool. It is a great work. Now, I think I...

N1ckDunn posted a comment on a wiki page

N1ckDunn — Fri, 23 May 2014 07:08:08 -0000

New version 1.6.1 added with improved GUI options and additions to PHP scanning.

N1ckDunn posted a comment on discussion General Discussion

N1ckDunn — Tue, 04 Feb 2014 07:52:55 -0000

Hi Unfortunately I haven't added that functionality yet. I'm planning to do this...

VCG-user posted a comment on discussion General Discussion

VCG-user — Mon, 03 Feb 2014 05:05:29 -0000

Hi VCG-Team, We are currently looking for a tool that would do a code quality check...

Mark Freedman posted a comment on discussion General Discussion

Mark Freedman — Mon, 20 Jan 2014 14:14:10 -0000

Does VisualCodeGrepper support running automatically via commandline? I'd like to...

Michael Serafin posted a comment on discussion General Discussion

Michael Serafin — Wed, 15 Jan 2014 17:45:34 -0000

When doing a full scan against one of my projects it comes across one of my files...