Keyless Memory Corruption Scanner
VULNERABILITY DETECTION & CODE ANALYSIS
Overview
Advanced memory safety vulnerability detection tool that identifies buffer overflows, use-after-free, memory leaks, format string vulnerabilities, and more in C/C++, Python, JavaScript, and Java code—entirely offline with no API keys required.
Key Features
- ✓ Buffer Overflow Detection (strcpy, strcat, gets, sprintf patterns)
- ✓ Use-After-Free Analysis (malloc/free variable tracking)
- ✓ Memory Leak Identification (allocations without frees)
- ✓ Format String Vulnerabilities (printf/sprintf user input)
- ✓ Null Pointer Dereference Detection
- ✓ Integer Overflow Patterns (arithmetic in allocations)
- ✓ Stack Overflow Detection (large stack allocations)
- ✓ Multi-Language Support (C/C++, Python, JS, Java)
- ✓ CVSS Scoring & Confidence Levels
- ✓ Production-Quality Remediation Guidance
- ✓ File Upload Support
- ✓ Scan History & Statistics
How It Works
Detection Engine: Regex pattern matching for vulnerable code patterns combined with variable tracking across scope. Each finding includes severity classification (CRITICAL/HIGH/MEDIUM/LOW), confidence scoring, line numbers, and context-aware remediation recommendations.
Offline & Keyless: Fully local scanning with no external API calls or API keys required. Safe for scanning sensitive source code.
Supported Vulnerabilities
C/C++: Buffer overflow, use-after-free, double free, format strings, uninitialized variables, null dereference, memory leaks, stack overflow, integer overflow, heap corruption
Python/JavaScript/Java: Language-specific patterns including mutable defaults, circular references, global pollution, unmanaged resources, missing cleanup
Technologies
Python
Flask
Regex Pattern Matching
Variable Tracking
Vulnerability Analysis
Code Quality Scoring
Use Cases
- 1. Security Code Review — Quick vulnerability screening
- 2. CI/CD Pipeline Integration — Automated scanning
- 3. Penetration Testing — Find memory safety issues
- 4. Educational Tool — Learn vulnerability patterns
- 5. Portfolio Project — Demonstrate security expertise
API Endpoints
POST /api/scan — Scan code snippet
POST /api/scan/file — Upload and scan file
GET /api/examples/<language> — Vulnerable code examples
GET /api/history — Scan history
GET /api/statistics — Scanning statistics