{"id":93051,"date":"2020-09-02T13:42:49","date_gmt":"2020-09-02T11:42:49","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/kak-ispolzovat-prostuyu-utilitu-dlya-poiska-uyazvimostej-v-programmnom-kode"},"modified":"2020-09-02T13:42:49","modified_gmt":"2020-09-02T11:42:49","slug":"kak-ispolzovat-prostuyu-utilitu-dlya-poiska-uyazvimostej-v-programmnom-kode","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kak-ispolzovat-prostuyu-utilitu-dlya-poiska-uyazvimostej-v-programmnom-kode","title":{"rendered":"Kuidas kasutada lihtsat utiliiti haavatavuste otsimiseks tarkvarakoodis","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Graudit toetab mitmeid programmeerimiskeeli ja v\u00f5imaldab integreerida koodibaasi turvatestimise otse arendusprotsessi.<\/p>\n<p><img decoding=\"async\" alt=\"Kuidas kasutada lihtsat utiliiti haavatavuste otsimiseks tarkvarakoodis\" src=\"\/wp-content\/uploads\/2020\/09\/fe3b3576a95e673e5add20f850522cd3.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nAllikas: <noindex><a rel=\"nofollow\" href=\"https:\/\/unsplash.com\/search\/photos\/learn-programming?utm_source=unsplash&amp;utm_medium=referral&amp;utm_content=creditCopyText\">Unsplash<\/a><\/noindex> (Markus Spiske)<\/p>\n<p>Testimine on oluline osa tarkvaraarenduse eluts\u00fcklist. On olemas palju erinevaid testimise liike, millest iga\u00fchel on oma \u00fclesanne. T\u00e4na tahan r\u00e4\u00e4kida koodis esinevate turvaprobleemide leidmisest.<\/p>\n<p>On ilmselge, et t\u00e4nap\u00e4evastes tarkvaraarenduse tingimustes on oluline tagada protsesside turvalisus. Aja jooksul on isegi kasutusele v\u00f5etud spetsiaalne termin DevSecOps. Selle termini all m\u00f5istetakse rida menetlusi, mille eesm\u00e4rk on tuvastada ja k\u00f5rvaldada rakenduses esinevaid haavatavusi. On olemas spetsialiseeritud avatud l\u00e4htekoodiga lahendusi haavatavuste kontrollimiseks vastavalt standarditele <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/OWASP\">OWASP<\/a><\/noindex>, mis kirjeldavad erinevaid t\u00fc\u00fcpe ja k\u00e4itumist koodihaavatavustes.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>On olemas erinevaid l\u00e4henemisviise turvaprobleemide lahendamiseks, n\u00e4iteks rakenduste staatiline turvatestimine (SAST), d\u00fcnaamiline turvatestimine (DAST), interaktiivne turvatestimine (IAST), tarkvarakomponentide anal\u00fc\u00fcs (Software Composition Analysis) ja nii edasi.<\/p>\n<p>Staatiline rakenduste turvatestimine tuvastab vigu juba kirjutatud koodis. See l\u00e4henemine ei n\u00f5ua rakenduse k\u00e4ivitamist, mist\u00f5ttu nimetatakse seda staatiliseks anal\u00fc\u00fcsiks.<\/p>\n<p>Keskendun staatilisele koodi anal\u00fc\u00fcsile ja kasutan lihtsat avatud l\u00e4htekoodiga t\u00f6\u00f6riista, et k\u00f5ike praktikas demonstreerida.<\/p>\n<h2>Miks valisin avatud l\u00e4htekoodiga t\u00f6\u00f6riista staatiliseks koodi turvaanal\u00fc\u00fcsiks.<\/h2>\n<p>\nSellel on mitmeid p\u00f5hjuseid: esiteks on see tasuta, kuna kasutate kogukonna poolt loodud t\u00f6\u00f6riista, mis on loodud selleks, et aidata teisi arendajaid. Kui teil on v\u00e4ike meeskond v\u00f5i idufirma, siis on teil suurep\u00e4rane v\u00f5imalus s\u00e4\u00e4sta, kasutades avatud l\u00e4htekoodiga tarkvara oma koodibaasi turvamise kontrollimiseks. Teiseks vabastab see teid vajadusest palgata eraldi DevSecOps meeskond, mis veelgi v\u00e4hendab teie kulusid.<\/p>\n<p>Hea avatud l\u00e4htekoodiga t\u00f6\u00f6riistad loovad alati paindlikkuse suurenenud n\u00f5udmistega arvestades. Seet\u00f5ttu saab neid kasutada praktiliselt igas keskkonnas, katab laia valikut \u00fclesandeid. Arendajatel on palju lihtsam neid t\u00f6\u00f6riistu omavahel siduda s\u00fcsteemiga, mille nad on juba oma projektide kallal t\u00f6\u00f6tades loonud.<\/p>\n<p>Kuid v\u00f5ivad esineda olukorrad, kus vajate funktsiooni, mida valitud t\u00f6\u00f6riist ei paku. Sel juhul on teil v\u00f5imalus kopeerida selle kood ja arendada selle p\u00f5hjal oma t\u00f6\u00f6riist, mis sisaldab teile vajalikku funktsionaalsust.<\/p>\n<p>Kuna avatud l\u00e4htekoodiga tarkvara arendust m\u00f5jutab enamasti aktiivselt kogukond, tehakse muudatuste tegemise otsused piisavalt kiiresti ja asjakohaselt: avatud l\u00e4htekoodiga projekti arendajad tuginevad kasutajate tagasisidele ja ettepanekutele, nende t\u00f5rke- ja probleemide teadetele.<\/p>\n<h2>Grauditi kasutamine koodi turvaanal\u00fc\u00fcsiks<\/h2>\n<p>\nKoodi staatiliseks anal\u00fc\u00fcsiks saab kasutada erinevaid avatud l\u00e4htekoodiga t\u00f6\u00f6riistu, kuid universaalset t\u00f6\u00f6riista k\u00f5igi programmeerimiskeelte jaoks ei ole. M\u00f5nede t\u00f6\u00f6riistade arendajad j\u00e4rgivad OWASP-i soovitusi ja p\u00fc\u00fcavad h\u00f5lmata nii palju keeli kui v\u00f5imalik.<\/p>\n<p>Siin me kasutame <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/wireghoul\/graudit\">Graudit<\/a><\/noindex>, lihtsat k\u00e4surea utiliiti, mis v\u00f5imaldab meil leida haavatavusi meie koodibaasis. See toetab erinevaid keeli, kuid nende hulk on siiski piiratud. Graudit on \u00fcles ehitatud grep utiliidi p\u00f5hjal, mis kunagi ilmus GNU litsentsi all.<\/p>\n<p>On olemas sarnaseid t\u00f6\u00f6riistu staatiliseks koodianal\u00fc\u00fcsiks \u2014 Rough Auditing Tool for Security (RATS), Securitycompass Web Application Analysis Tool (SWAAT), flawfinder ja nii edasi. Kuid Graudit on v\u00e4ga paindlik ja tal on minimaalsed tehnilised n\u00f5uded. Siiski v\u00f5ivad tekkida \u00fclesanded, millega Graudit ei suuda toime tulla. Siis tasub otsida teisi v\u00f5imalusi siin <noindex><a rel=\"nofollow\" href=\"https:\/\/project-awesome.org\/mre\/awesome-static-analysis\">selles nimekirjas<\/a><\/noindex>.<\/p>\n<p>Saame integreerida selle t\u00f6\u00f6riista konkreetse projekti, muuta selle valitud kasutajale kergesti k\u00e4ttesaadavaks v\u00f5i \u2014 kasutada seda k\u00f5igis meie projektides \u00fcheaegselt. Sellestki ilmneb Graudit'i paindlikkus. Alustame repode kloonimisega:<\/p>\n<pre><code class=\"bash\">$ git clone https:\/\/github.com\/wireghoul\/graudit<\/code><\/pre>\n<p>\nN\u00fc\u00fcd loome Graudit'ile s\u00fcmboolse lingi, et kasutada seda k\u00e4surea vormingus<\/p>\n<pre><code class=\"bash\">$ cd ~\/bin &amp;&amp; mkdir graudit\n$ ln --symbolic ~\/graudit\/graudit ~\/bin\/graudit<\/code><\/pre>\n<p>\nLisame aliase .bashrc (v\u00f5i teise konfiguratsioonifaili, mida kasutate):<\/p>\n<pre><code class=\"bash\">#------ .bashrc ------\nalias graudit=&quot;~\/bin\/graudit&quot;<\/code><\/pre>\n<p>\nTaask\u00e4ivitame:<\/p>\n<pre><code class=\"bash\">$ source ~\/bashrc # V\u00d5I\n$ exec $SHELL\n<\/code><\/pre>\n<p>\nKontrollime, kas installatsioon l\u00e4ks edukalt:<\/p>\n<pre><code class=\"bash\">$ graudit -h<\/code><\/pre>\n<p>Kui n\u00e4ete midagi sarnast, siis k\u00f5ik on korras.<\/p>\n<p><img decoding=\"async\" alt=\"Kuidas kasutada lihtsat utiliiti haavatavuste otsimiseks tarkvarakoodis\" src=\"\/wp-content\/uploads\/2020\/09\/b404cfdd26f4fd556818f37fd9610592.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nTestin \u00fche oma olemasoleva projekti. Enne t\u00f6\u00f6riista k\u00e4ivitamist tuleb sellele edastada andmebaas, mis vastab keelele, milles minu projekt on kirjutatud. Andmebaasid asuvad kaustas ~\/gradit\/signatures:<\/p>\n<pre><code class=\"bash\">$ graudit -d ~\/gradit\/signatures\/js.db<\/code><\/pre>\n<p>\nNii et testisin oma projekti kahte js-faili, ja Graudit andis konsoolis teavet minu koodi haavatavuste kohta:<\/p>\n<p><img decoding=\"async\" alt=\"Kuidas kasutada lihtsat utiliiti haavatavuste otsimiseks tarkvarakoodis\" src=\"\/wp-content\/uploads\/2020\/09\/3c4eb283b499bae861b7379a6901ca1d.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Kuidas kasutada lihtsat utiliiti haavatavuste otsimiseks tarkvarakoodis\" src=\"\/wp-content\/uploads\/2020\/09\/6a02c74969d73082b7f16ece6051a949.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nV\u00f5ite proovida samamoodi testida oma projekte. Erinevate programmeerimiskeelte andmebaaside loendit saab vaadata <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/wireghoul\/graudit#databases\">siit<\/a><\/noindex>.<\/p>\n<h2>Graudit'i eelised ja puudused<\/h2>\n<p>\nGraudit toetab mitmeid programmeerimiskeeli. Seet\u00f5ttu sobib see laiale kasutajaskonnale. See v\u00f5ib hinna poolest h\u00e4sti konkureerida igasuguste tasuta v\u00f5i tasuliste analoogidega. Ja v\u00e4ga oluline on, et projekti arendatakse endiselt edasi ning kogukond mitte ainult ei aita arendajaid, vaid ka teisi kasutajaid, kes p\u00fc\u00fcavad t\u00f6\u00f6riista selgeks saada.<\/p>\n<p>See on mugav t\u00f6\u00f6riist, kuid praegu ei suuda see alati t\u00e4pselt n\u00e4idata, milles probleem seisneb, mis on seotud kahtlase koodil\u00f5iguga. Arendajad j\u00e4tkavad Graudit'i t\u00e4iustamist. <\/p>\n<p>Kuid igal juhul on kasulik t\u00e4helepanu p\u00f6\u00f6rata koodis v\u00f5imalikele turvaprobleemidele, kasutades selliseid t\u00f6\u00f6riistu.<\/p>\n<h2>Algus&#8230;<\/h2>\n<p>\nSelles artiklis k\u00e4sitlesin vaid \u00fchte paljusid haavatavuste leidmise viise \u2014 rakenduste staatilist turvatestimist. Koodi staatiline anal\u00fc\u00fcs on lihtne, kuid see on vaid algus. Et rohkem teada saada oma koodibaasi turvalisusest, tuleb integreerida tarkvaraarenduse eluts\u00fcklisse ka teisi testimisviise.<\/p>\n<p><\/p>\n<h4>Reklaami \u00f5igustes<\/h4>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/vdsina.ru\/cloud-servers?partner=habr86\">Usaldusv\u00e4\u00e4rne VPS<\/a><\/noindex> ja \u00f5ige hinnaplaani valik aitavad v\u00e4ltida arendust\u00f6\u00f6de h\u00e4irimist ebameeldivate probleemidega \u2014 k\u00f5ik t\u00f6\u00f6tab t\u00f5rgeteta ja v\u00e4ga k\u00f5rge t\u00f6\u00f6valmidusega!<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/vdsina.ru\/cloud-servers?partner=habr86\"><img decoding=\"async\" alt=\"Kuidas kasutada lihtsat utiliiti haavatavuste otsimiseks tarkvarakoodis\" src=\"\/wp-content\/uploads\/2020\/09\/140d9076b505a6de8b3f45c73dfc476d.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><br \/>\n<br \/>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/vdsina\/blog\/517170\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>Graudit \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u044f\u0437\u044b\u043a\u043e\u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u044b \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438. \u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: Unsplash (Markus Spiske) \u0422\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u2014 \u0432\u0430\u0436\u043d\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0436\u0438\u0437\u043d\u0435\u043d\u043d\u043e\u0433\u043e \u0446\u0438\u043a\u043b\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f. \u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u043e\u0447\u0435\u043d\u044c \u043c\u043d\u043e\u0433\u043e \u0432\u0438\u0434\u043e\u0432 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u043a\u0430\u0436\u0434\u044b\u0439 \u0438\u0437 \u043d\u0438\u0445 \u0440\u0435\u0448\u0430\u0435\u0442 \u0441\u0432\u043e\u044e \u0437\u0430\u0434\u0430\u0447\u0443. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044f \u0445\u043e\u0447\u0443 \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u0442\u044c \u043e \u043f\u043e\u0438\u0441\u043a\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u0434\u0435. \u041e\u0447\u0435\u0432\u0438\u0434\u043d\u043e, \u0447\u0442\u043e \u0432 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0440\u0435\u0430\u043b\u0438\u044f\u0445 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":93052,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-93051","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"Graudit \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u044f\u0437\u044b\u043a\u043e\u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u044b \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438. \u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: Unsplash (Markus Spiske) \u0422\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u2014 \u0432\u0430\u0436\u043d\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0436\u0438\u0437\u043d\u0435\u043d\u043d\u043e\u0433\u043e \u0446\u0438\u043a\u043b\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f. \u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u043e\u0447\u0435\u043d\u044c \u043c\u043d\u043e\u0433\u043e \u0432\u0438\u0434\u043e\u0432 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u043a\u0430\u0436\u0434\u044b\u0439 \u0438\u0437 \u043d\u0438\u0445 \u0440\u0435\u0448\u0430\u0435\u0442 \u0441\u0432\u043e\u044e \u0437\u0430\u0434\u0430\u0447\u0443. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044f \u0445\u043e\u0447\u0443 \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u0442\u044c \u043e \u043f\u043e\u0438\u0441\u043a\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u0434\u0435. \u041e\u0447\u0435\u0432\u0438\u0434\u043d\u043e, \u0447\u0442\u043e \u0432 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0440\u0435\u0430\u043b\u0438\u044f\u0445\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kak-ispolzovat-prostuyu-utilitu-dlya-poiska-uyazvimostej-v-programmnom-kode\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041a\u0430\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0441\u0442\u0443\u044e \u0443\u0442\u0438\u043b\u0438\u0442\u0443 \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043a\u043e\u0434\u0435 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"Graudit \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u044f\u0437\u044b\u043a\u043e\u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u044b \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438. \u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: Unsplash (Markus Spiske) \u0422\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u2014 \u0432\u0430\u0436\u043d\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0436\u0438\u0437\u043d\u0435\u043d\u043d\u043e\u0433\u043e \u0446\u0438\u043a\u043b\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f. \u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u043e\u0447\u0435\u043d\u044c \u043c\u043d\u043e\u0433\u043e \u0432\u0438\u0434\u043e\u0432 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u043a\u0430\u0436\u0434\u044b\u0439 \u0438\u0437 \u043d\u0438\u0445 \u0440\u0435\u0448\u0430\u0435\u0442 \u0441\u0432\u043e\u044e \u0437\u0430\u0434\u0430\u0447\u0443. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044f \u0445\u043e\u0447\u0443 \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u0442\u044c \u043e \u043f\u043e\u0438\u0441\u043a\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u0434\u0435. \u041e\u0447\u0435\u0432\u0438\u0434\u043d\u043e, \u0447\u0442\u043e \u0432 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0440\u0435\u0430\u043b\u0438\u044f\u0445\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kak-ispolzovat-prostuyu-utilitu-dlya-poiska-uyazvimostej-v-programmnom-kode\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-09-02T11:42:49+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-09-02T11:42:49+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kuidas kasutada lihtsat t\u00f6\u00f6riista haavatavuste leidmiseks programmikoodis | ProHoster","description":"Graudit toetab mitmeid programmeerimiskeeli ja v\u00f5imaldab integreerida koodibaasi turvatestimise otse arendusprotsessi. Allikas: Unsplash (Markus Spiske) Testimine on tarkvaraarenduse eluts\u00fckli oluline osa. On palju erinevaid testimisviise, igal neist on oma \u00fclesande lahendamine. T\u00e4na tahan r\u00e4\u00e4kida koodis turvaprobleemide leidmisest. On ilmne, et t\u00e4nap\u00e4eva reaalsuses","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kak-ispolzovat-prostuyu-utilitu-dlya-poiska-uyazvimostej-v-programmnom-kode","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0441\u0442\u0443\u044e \u0443\u0442\u0438\u043b\u0438\u0442\u0443 \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043a\u043e\u0434\u0435 | ProHoster","og:description":"Graudit \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u044f\u0437\u044b\u043a\u043e\u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u044b \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438. \u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: Unsplash (Markus Spiske) \u0422\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u2014 \u0432\u0430\u0436\u043d\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0436\u0438\u0437\u043d\u0435\u043d\u043d\u043e\u0433\u043e \u0446\u0438\u043a\u043b\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f. \u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u043e\u0447\u0435\u043d\u044c \u043c\u043d\u043e\u0433\u043e \u0432\u0438\u0434\u043e\u0432 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u043a\u0430\u0436\u0434\u044b\u0439 \u0438\u0437 \u043d\u0438\u0445 \u0440\u0435\u0448\u0430\u0435\u0442 \u0441\u0432\u043e\u044e \u0437\u0430\u0434\u0430\u0447\u0443. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044f \u0445\u043e\u0447\u0443 \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u0442\u044c \u043e \u043f\u043e\u0438\u0441\u043a\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u0434\u0435. \u041e\u0447\u0435\u0432\u0438\u0434\u043d\u043e, \u0447\u0442\u043e \u0432 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0440\u0435\u0430\u043b\u0438\u044f\u0445","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kak-ispolzovat-prostuyu-utilitu-dlya-poiska-uyazvimostej-v-programmnom-kode","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-02T11:42:49+00:00","article:modified_time":"2020-09-02T11:42:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"93051","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:56:23","updated":"2022-10-03 07:52:13"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/93051","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=93051"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/93051\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/93052"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=93051"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=93051"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=93051"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}