pentest-whitebox-code-review

What problem does it solve?

Source code security audit using backward taint analysis, slot type classification, render context verification, and 3-phase parallel review producing an exploitation queue.

Core Features & Use Cases

• Backward taint analysis tracing dangerous sinks to user-controlled sources.
• Slot type classification (SQL-val, SQL-ident, CMD-argument, FILE-path, TEMPLATE-expr) to identify risky patterns.
• Render context verification for XSS protection across HTML_BODY, HTML_ATTRIBUTE, JAVASCRIPT_STRING, URL_PARAM, CSS_VALUE.
• 3-phase workflow with discovery, vulnerability analysis across multiple tracks, and synthesis to produce a prioritized exploitation queue.
• Automated generation of exploitation queue JSON for downstream validation.

Quick Start

Run the white-box code review workflow on your target repository to produce a prioritized exploitation queue for validation.