Audit PHP and other source code by listing calls to known dangerous functions, checking for enumeration gaps, and examining input paths and safeguards. Store risk assessments and verdicts in a searchable audit ledger.
Security reviews of PHP apps and WordPress plugins
Checking for missed calls to known dangerous functions
Index reference libraries locally with XERJ and retrieve relevant implementations before coding. Use the retrieved source to understand unfamiliar API behavior, port algorithms, or investigate errors that repeated attempts have not resolved.
Checking how an unfamiliar API behaves
Porting an algorithm from a reference implementation
Investigating errors after repeated failed attempts
