{"id":93051,"date":"2020-09-02T13:42:49","date_gmt":"2020-09-02T11:42:49","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/kak-ispolzovat-prostuyu-utilitu-dlya-poiska-uyazvimostej-v-programmnom-kode"},"modified":"2020-09-02T13:42:49","modified_gmt":"2020-09-02T11:42:49","slug":"kak-ispolzovat-prostuyu-utilitu-dlya-poiska-uyazvimostej-v-programmnom-kode","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/kak-ispolzovat-prostuyu-utilitu-dlya-poiska-uyazvimostej-v-programmnom-kode","title":{"rendered":"Jak pou\u017e\u00edvat jednoduchou utilitu pro vyhled\u00e1v\u00e1n\u00ed zranitelnost\u00ed v k\u00f3du","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Graudit podporuje mnoho programovac\u00edch jazyk\u016f a umo\u017e\u0148uje integrovat testov\u00e1n\u00ed bezpe\u010dnosti k\u00f3du p\u0159\u00edmo do procesu v\u00fdvoje.<\/p>\n<p><img decoding=\"async\" alt=\"Jak pou\u017e\u00edvat jednoduchou utilitu pro vyhled\u00e1v\u00e1n\u00ed zranitelnost\u00ed v k\u00f3du\" src=\"\/wp-content\/uploads\/2020\/09\/fe3b3576a95e673e5add20f850522cd3.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nZdroj: <noindex><a rel=\"nofollow\" href=\"https:\/\/unsplash.com\/search\/photos\/learn-programming?utm_source=unsplash&amp;utm_medium=referral&amp;utm_content=creditCopyText\">Unsplash<\/a><\/noindex> (Markus Spiske)<\/p>\n<p>Testov\u00e1n\u00ed je d\u016fle\u017eitou sou\u010d\u00e1st\u00ed \u017eivotn\u00edho cyklu v\u00fdvoje softwaru. Existuje mnoho typ\u016f testov\u00e1n\u00ed, z nich\u017e ka\u017ed\u00fd \u0159e\u0161\u00ed sv\u016fj vlastn\u00ed probl\u00e9m. Dnes chci hovo\u0159it o hled\u00e1n\u00ed bezpe\u010dnostn\u00edch probl\u00e9m\u016f v k\u00f3du.<\/p>\n<p>Je z\u0159ejm\u00e9, \u017ee v modern\u00edch podm\u00ednk\u00e1ch v\u00fdvoje softwaru je d\u016fle\u017eit\u00e9 zajistit bezpe\u010dnost proces\u016f. Byl dokonce zaveden speci\u00e1ln\u00ed term\u00edn DevSecOps. Tento term\u00edn ozna\u010duje \u0159adu procedur zam\u011b\u0159en\u00fdch na odhalov\u00e1n\u00ed a odstran\u011bn\u00ed zranitelnost\u00ed v aplikaci. Existuj\u00ed specializovan\u00e1 open source \u0159e\u0161en\u00ed pro kontrolu zranitelnost\u00ed podle standard\u016f <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/OWASP\">OWASP<\/a><\/noindex>, kter\u00e9 popisuj\u00ed r\u016fzn\u00e9 typy a chov\u00e1n\u00ed zranitelnost\u00ed v zdrojov\u00e9m k\u00f3du.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Existuj\u00ed r\u016fzn\u00e9 p\u0159\u00edstupy k \u0159e\u0161en\u00ed probl\u00e9m\u016f bezpe\u010dnosti, nap\u0159\u00edklad statick\u00e9 testov\u00e1n\u00ed bezpe\u010dnosti aplikac\u00ed (SAST), dynamick\u00e9 testov\u00e1n\u00ed bezpe\u010dnosti aplikac\u00ed (DAST), interaktivn\u00ed testov\u00e1n\u00ed bezpe\u010dnosti aplikac\u00ed (IAST), anal\u00fdza komponent\u016f softwaru (Software Composition Analysis) a dal\u0161\u00ed.<\/p>\n<p>Statick\u00e9 testov\u00e1n\u00ed bezpe\u010dnosti aplikac\u00ed odhaluje chyby v ji\u017e napsan\u00e9m k\u00f3du. Tento p\u0159\u00edstup nevy\u017eaduje spu\u0161t\u011bn\u00ed aplikace, proto se naz\u00fdv\u00e1 statickou anal\u00fdzou.<\/p>\n<p>Zam\u011b\u0159\u00edm se na statickou anal\u00fdzu k\u00f3du a vyu\u017eiji jednoduch\u00fd open source n\u00e1stroj, abych v\u0161e demonstroval v praxi.<\/p>\n<h2>Pro\u010d jsem si vybral open source n\u00e1stroj pro statickou anal\u00fdzu bezpe\u010dnosti k\u00f3du<\/h2>\n<p>\nJe k tomu n\u011bkolik d\u016fvod\u016f: za prv\u00e9, je to zdarma, proto\u017ee pou\u017e\u00edv\u00e1te n\u00e1stroj vyvinut\u00fd komunitou podobn\u011b sm\u00fd\u0161lej\u00edc\u00edch lid\u00ed, kte\u0159\u00ed cht\u011bj\u00ed pomoci ostatn\u00edm v\u00fdvoj\u00e1\u0159\u016fm. Pokud m\u00e1te mal\u00fd t\u00fdm nebo startup, m\u00e1te skv\u011blou p\u0159\u00edle\u017eitost u\u0161et\u0159it pou\u017eit\u00edm softwaru s otev\u0159en\u00fdm zdrojov\u00fdm k\u00f3dem k ov\u011b\u0159en\u00ed bezpe\u010dnosti sv\u00e9ho k\u00f3du. Za druh\u00e9, zbav\u00edte se nutnosti naj\u00edmat samostatn\u00fd t\u00fdm DevSecOps, co\u017e d\u00e1le sni\u017euje va\u0161e n\u00e1klady.<\/p>\n<p>Dobr\u00fd open source n\u00e1stroje v\u017edy vytv\u00e1\u0159ej\u00ed s ohledem na zv\u00fd\u0161en\u00e9 po\u017eadavky na flexibilitu. Proto je lze pou\u017e\u00edt prakticky v jak\u00e9mkoli prost\u0159ed\u00ed a pokr\u00fdt \u0161irok\u00e9 spektrum \u00faloh. V\u00fdvoj\u00e1\u0159\u016fm je mnohem snaz\u0161\u00ed sladit takov\u00e9 n\u00e1stroje se syst\u00e9mem, kter\u00fd u\u017e vytvo\u0159ili p\u0159i pr\u00e1ci na sv\u00fdch projektech.<\/p>\n<p>M\u016f\u017ee v\u0161ak nastat situace, kdy budete pot\u0159ebovat funkci, kterou vybran\u00fd n\u00e1stroj nem\u00e1. V takov\u00e9m p\u0159\u00edpad\u011b m\u00e1te mo\u017enost vytvo\u0159it fork jeho k\u00f3du a vyvinout na jeho z\u00e1klad\u011b sv\u016fj vlastn\u00ed n\u00e1stroj s po\u017eadovanou funkcionalitou.<\/p>\n<p>Proto\u017ee ve v\u011bt\u0161in\u011b p\u0159\u00edpad\u016f na v\u00fdvoj open source softwaru aktivn\u011b p\u016fsob\u00ed komunita, rozhodnut\u00ed o proveden\u00ed zm\u011bn jsou p\u0159ij\u00edm\u00e1na pom\u011brn\u011b rychle a v\u011bcn\u011b: v\u00fdvoj\u00e1\u0159i open source projektu se op\u00edraj\u00ed o zp\u011btnou vazbu a n\u00e1vrhy u\u017eivatel\u016f, na jejich zpr\u00e1vy o nalezen\u00fdch chyb\u00e1ch a dal\u0161\u00edch probl\u00e9mech.<\/p>\n<h2>Pou\u017eit\u00ed Graudit pro anal\u00fdzu bezpe\u010dnosti k\u00f3du<\/h2>\n<p>\nPro statickou anal\u00fdzu k\u00f3du lze pou\u017e\u00edt r\u016fzn\u00e9 open source n\u00e1stroje, neexistuje univerz\u00e1ln\u00ed n\u00e1stroj pro v\u0161echny programovac\u00ed jazyky. V\u00fdvoj\u00e1\u0159i n\u011bkter\u00fdch z nich se \u0159\u00edd\u00ed doporu\u010den\u00edmi OWASP a sna\u017e\u00ed se pokr\u00fdt co nejv\u00edce jazyk\u016f.<\/p>\n<p>Zde budeme pou\u017e\u00edvat <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/wireghoul\/graudit\">Graudit<\/a><\/noindex>, jednoduch\u00fd p\u0159\u00edkazov\u00fd n\u00e1stroj, kter\u00fd n\u00e1m umo\u017en\u00ed naj\u00edt zranitelnosti v na\u0161\u00ed k\u00f3dov\u00e9 z\u00e1kladn\u011b. Podporuje r\u016fzn\u00e9 jazyky, ale jejich soubor je p\u0159esto omezen\u00fd. Graudit byl vyvinut na z\u00e1klad\u011b pomocn\u00e9ho n\u00e1stroje grep, kter\u00fd byl kdysi vyd\u00e1n pod licenc\u00ed GNU.<\/p>\n<p>Existuj\u00ed podobn\u00e9 n\u00e1stroje pro statickou anal\u00fdzu k\u00f3du \u2014 Rough Auditing Tool for Security (RATS), Securitycompass Web Application Analysis Tool (SWAAT), flawfinder a tak d\u00e1le. Ale Graudit je velmi flexibiln\u00ed a m\u00e1 minim\u00e1ln\u00ed technick\u00e9 po\u017eadavky. Nicm\u00e9n\u011b se mohou objevit \u00fakoly, kter\u00e9 Graudit nen\u00ed schopen vy\u0159e\u0161it. Pak m\u016f\u017eete hledat jin\u00e9 mo\u017enosti zde <noindex><a rel=\"nofollow\" href=\"https:\/\/project-awesome.org\/mre\/awesome-static-analysis\">v tomto seznamu<\/a><\/noindex>.<\/p>\n<p>M\u016f\u017eeme tento n\u00e1stroj integrovat do konkr\u00e9tn\u00edho projektu, nebo jej ud\u011blat dostupn\u00fdm pro vybran\u00e9ho u\u017eivatele, nebo jej pou\u017e\u00edvat sou\u010dasn\u011b ve v\u0161ech na\u0161ich projektech. I tak se projevuje flexibilita Graudit. Tak\u017ee nejprve naklonujeme repozit\u00e1\u0159:<\/p>\n<pre><code class=\"bash\">$ git clone https:\/\/github.com\/wireghoul\/graudit<\/code><\/pre>\n<p>\nNyn\u00ed vytvo\u0159me pro Graudit symbolick\u00fd odkaz, abychom jej mohli pou\u017e\u00edvat v p\u0159\u00edkazov\u00e9m form\u00e1tu.<\/p>\n<pre><code class=\"bash\">$ cd ~\/bin &amp;&amp; mkdir graudit\n$ ln --symbolic ~\/graudit\/graudit ~\/bin\/graudit<\/code><\/pre>\n<p>\nP\u0159id\u00e1me alias do .bashrc (nebo do jin\u00e9ho konfigura\u010dn\u00edho souboru, kter\u00fd pou\u017e\u00edv\u00e1te):<\/p>\n<pre><code class=\"bash\">#------ .bashrc ------\nalias graudit=&quot;~\/bin\/graudit&quot;<\/code><\/pre>\n<p>\nRestartujeme:<\/p>\n<pre><code class=\"bash\">$ source ~\/.bashrc # NEBO\n$ exec $SHELL\n<\/code><\/pre>\n<p>\nOv\u011b\u0159\u00edme, zda byla instalace \u00fasp\u011b\u0161n\u00e1:<\/p>\n<pre><code class=\"bash\">$ graudit -h<\/code><\/pre>\n<p>Pokud uvid\u00edte n\u011bco podobn\u00e9ho, je v\u0161e v po\u0159\u00e1dku.<\/p>\n<p><img decoding=\"async\" alt=\"Jak pou\u017e\u00edvat jednoduchou utilitu pro vyhled\u00e1v\u00e1n\u00ed zranitelnost\u00ed v k\u00f3du\" src=\"\/wp-content\/uploads\/2020\/09\/b404cfdd26f4fd556818f37fd9610592.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nTestuji jeden z ji\u017e existuj\u00edc\u00edch projekt\u016f. P\u0159ed spu\u0161t\u011bn\u00edm n\u00e1stroje je t\u0159eba mu p\u0159edat datab\u00e1zi odpov\u00eddaj\u00edc\u00ed jazyku, ve kter\u00e9m je naps\u00e1n m\u016fj projekt. Datab\u00e1ze se nach\u00e1zej\u00ed v slo\u017ece ~\/gradit\/signatures:<\/p>\n<pre><code class=\"bash\">$ graudit -d ~\/gradit\/signatures\/js.db<\/code><\/pre>\n<p>\nTak\u017ee jsem otestoval dva js soubory ze sv\u00e9ho projektu a Graudit v\u00fdstupoval do konzole informace o zranitelnostech v m\u00e9m k\u00f3du:<\/p>\n<p><img decoding=\"async\" alt=\"Jak pou\u017e\u00edvat jednoduchou utilitu pro vyhled\u00e1v\u00e1n\u00ed zranitelnost\u00ed v k\u00f3du\" src=\"\/wp-content\/uploads\/2020\/09\/3c4eb283b499bae861b7379a6901ca1d.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Jak pou\u017e\u00edvat jednoduchou utilitu pro vyhled\u00e1v\u00e1n\u00ed zranitelnost\u00ed v k\u00f3du\" src=\"\/wp-content\/uploads\/2020\/09\/6a02c74969d73082b7f16ece6051a949.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nM\u016f\u017eete podobn\u00fdm zp\u016fsobem otestovat sv\u00e9 projekty. Seznam datab\u00e1z\u00ed pro r\u016fzn\u00e9 programovac\u00ed jazyky si m\u016f\u017eete prohl\u00e9dnout. <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/wireghoul\/graudit#databases\">zde<\/a><\/noindex>.<\/p>\n<h2>V\u00fdhody a nev\u00fdhody Graudit<\/h2>\n<p>\nGraudit podporuje mnoho programovac\u00edch jazyk\u016f. Proto je vhodn\u00fd pro \u0161irok\u00fd okruh u\u017eivatel\u016f. M\u016f\u017ee d\u016fstojn\u011b konkurovat jak\u00fdmikoli bezplatn\u00fdmi nebo placen\u00fdmi alternativami. A je velmi d\u016fle\u017eit\u00e9, \u017ee na projektu se st\u00e1le pracuje a komunitn\u00ed podpora pom\u00e1h\u00e1 nejen v\u00fdvoj\u00e1\u0159\u016fm, ale i dal\u0161\u00edm u\u017eivatel\u016fm, kte\u0159\u00ed se sna\u017e\u00ed porozum\u011bt tomuto n\u00e1stroji.<\/p>\n<p>Je to pohodln\u00fd n\u00e1stroj, ale zat\u00edm nemus\u00ed v\u017edy p\u0159esn\u011b uk\u00e1zat, v \u010dem p\u0159esn\u011b spo\u010d\u00edv\u00e1 probl\u00e9m spojen\u00fd s podez\u0159el\u00fdm \u00fasekem k\u00f3du. V\u00fdvoj\u00e1\u0159i nad\u00e1le vylep\u0161uj\u00ed Graudit. <\/p>\n<p>Ale v ka\u017ed\u00e9m p\u0159\u00edpad\u011b je u\u017eite\u010dn\u00e9 v\u011bnovat pozornost potenci\u00e1ln\u00edm bezpe\u010dnostn\u00edm probl\u00e9m\u016fm v k\u00f3du pomoc\u00ed podobn\u00fdch n\u00e1stroj\u016f.<\/p>\n<h2>Za\u010d\u00e1tek\u2026<\/h2>\n<p>\nV tomto \u010dl\u00e1nku jsem se pod\u00edval pouze na jeden z mnoha zp\u016fsob\u016f, jak vyhled\u00e1vat zranitelnosti \u2014 statick\u00e9 testov\u00e1n\u00ed bezpe\u010dnosti aplikac\u00ed. Prov\u00e9st statickou anal\u00fdzu k\u00f3du je snadn\u00e9, ale to je pouze za\u010d\u00e1tek. Abyste se dov\u011bd\u011bli v\u00edce o bezpe\u010dnosti va\u0161\u00ed k\u00f3dov\u00e9 z\u00e1kladny, je t\u0159eba do \u017eivotn\u00edho cyklu v\u00fdvoje softwaru integrovat i dal\u0161\u00ed typy testov\u00e1n\u00ed.<\/p>\n<p><\/p>\n<h4>Na z\u00e1klad\u011b reklamy<\/h4>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/vdsina.ru\/cloud-servers?partner=habr86\">Spolehliv\u00fd VPS<\/a><\/noindex> a spr\u00e1vn\u00fd v\u00fdb\u011br tarifu umo\u017en\u00ed m\u00e9n\u011b se distrahovat od v\u00fdvoje nep\u0159\u00edjemn\u00fdmi probl\u00e9my \u2014 v\u0161e bude fungovat bez v\u00fdpadk\u016f a s velmi vysokou dostupnost\u00ed!<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/vdsina.ru\/cloud-servers?partner=habr86\"><img decoding=\"async\" alt=\"Jak pou\u017e\u00edvat jednoduchou utilitu pro vyhled\u00e1v\u00e1n\u00ed zranitelnost\u00ed v k\u00f3du\" src=\"\/wp-content\/uploads\/2020\/09\/140d9076b505a6de8b3f45c73dfc476d.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/vdsina\/blog\/517170\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>Graudit \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u044f\u0437\u044b\u043a\u043e\u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u044b \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438. \u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: Unsplash (Markus Spiske) \u0422\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u2014 \u0432\u0430\u0436\u043d\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0436\u0438\u0437\u043d\u0435\u043d\u043d\u043e\u0433\u043e \u0446\u0438\u043a\u043b\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f. \u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u043e\u0447\u0435\u043d\u044c \u043c\u043d\u043e\u0433\u043e \u0432\u0438\u0434\u043e\u0432 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u043a\u0430\u0436\u0434\u044b\u0439 \u0438\u0437 \u043d\u0438\u0445 \u0440\u0435\u0448\u0430\u0435\u0442 \u0441\u0432\u043e\u044e \u0437\u0430\u0434\u0430\u0447\u0443. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044f \u0445\u043e\u0447\u0443 \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u0442\u044c \u043e \u043f\u043e\u0438\u0441\u043a\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u0434\u0435. \u041e\u0447\u0435\u0432\u0438\u0434\u043d\u043e, \u0447\u0442\u043e \u0432 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0440\u0435\u0430\u043b\u0438\u044f\u0445 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":93052,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-93051","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"Graudit \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u044f\u0437\u044b\u043a\u043e\u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u044b \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/kak-ispolzovat-prostuyu-utilitu-dlya-poiska-uyazvimostej-v-programmnom-kode\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041a\u0430\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0441\u0442\u0443\u044e \u0443\u0442\u0438\u043b\u0438\u0442\u0443 \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043a\u043e\u0434\u0435 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"Graudit \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u044f\u0437\u044b\u043a\u043e\u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u044b \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/kak-ispolzovat-prostuyu-utilitu-dlya-poiska-uyazvimostej-v-programmnom-kode\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-09-02T11:42:49+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-09-02T11:42:49+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Jak vyu\u017e\u00edt jednoduch\u00fd n\u00e1stroj pro hled\u00e1n\u00ed zranitelnost\u00ed v programov\u00e9m k\u00f3du | ProHoster","description":"Graudit podporuje mnoho programovac\u00edch jazyk\u016f a umo\u017e\u0148uje integrovat testov\u00e1n\u00ed bezpe\u010dnosti k\u00f3du p\u0159\u00edmo do procesu v\u00fdvoje.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/kak-ispolzovat-prostuyu-utilitu-dlya-poiska-uyazvimostej-v-programmnom-kode","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0441\u0442\u0443\u044e \u0443\u0442\u0438\u043b\u0438\u0442\u0443 \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043a\u043e\u0434\u0435 | ProHoster","og:description":"Graudit \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u044f\u0437\u044b\u043a\u043e\u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u044b \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438.","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/kak-ispolzovat-prostuyu-utilitu-dlya-poiska-uyazvimostej-v-programmnom-kode","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-02T11:42:49+00:00","article:modified_time":"2020-09-02T11:42:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"93051","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:56:23","updated":"2022-10-03 07:52:13","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/93051","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=93051"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/93051\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/93052"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=93051"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=93051"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=93051"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}