|
Revision 8, 1.3 kB
(checked in by nEUrOO, 1 year ago)
|
--
|
| Line | |
|---|
| 1 |
PHP-AST/ORACLE is a source code analysis framework oriented project. |
|---|
| 2 |
It's used at NIST for developing metrics, working around obfuscations |
|---|
| 3 |
and so on for the SAMATE project. |
|---|
| 4 |
The project is a research tool and I distribute it in order to make |
|---|
| 5 |
available some metrics, or even obfuscation patterns/engine. |
|---|
| 6 |
|
|---|
| 7 |
What you can do: |
|---|
| 8 |
. php-ast: Converting a php source code to XML Abstract Syntax Tree |
|---|
| 9 |
. php-oracle: Computing metrics, obfuscating source code, tracking variables, |
|---|
| 10 |
Converting from the AST to PHP/C++ (Java should arrive soon). |
|---|
| 11 |
|
|---|
| 12 |
How to compile it: |
|---|
| 13 |
. You only need libxml2 in order to compile the projects, then you can just type: |
|---|
| 14 |
make ast |
|---|
| 15 |
make oracle |
|---|
| 16 |
. This should produce 2 executable ./php-ast and ./php-oracle. In order to see how to use |
|---|
| 17 |
them you should see the main.cpp of php-oracle. |
|---|
| 18 |
For php-ast you just need to give the name of the php source code as parameter: |
|---|
| 19 |
./php-ast input.php |
|---|
| 20 |
./php-ast input.php output.xml |
|---|
| 21 |
|
|---|
| 22 |
How can you use the tool: |
|---|
| 23 |
. php-oracle is not exactly a tool, but a framework. You can develop your own modules, algorithms, metrics, |
|---|
| 24 |
source code transformation etc. in order to play with source code security. |
|---|
| 25 |
|
|---|
| 26 |
Contact: |
|---|
| 27 |
. Romain Gaucher - r@rgaucher.info |
|---|
| 28 |
. http://rgaucher.info |
|---|
| 29 |
|
|---|
| 30 |
License: |
|---|
| 31 |
. GPL |
|---|
| 32 |
|
|---|
| 33 |
|
|---|
| 34 |
|
|---|
