Find Common Vulnerabilities On Your Laravel Applications

Halo, kalau kamu merasa tulisan saya ngebantu kamu, kamu bisa ucapkan terima kasih lewat saweria.

Hello, if you find this article helpful, you can express your gratitude through saweria.

Laravel OWASP

For full information about Laravel OWASP, refer to the Laravel - OWASP Cheat Sheet.

Security & Performance Analysis Tools

Enlightn

Enlightn provides performance and security analysis.

Their documentation is excellent, and their solutions are easy to understand.

1. Install Enlightn

   composer require enlightn/enlightn
   

2. Run the following commands:

   # Show the report in your current session
   php artisan enlightn
   
   # To write the report to a file, use this command
   php artisan enlightn > /tmp/enlightn-output.txt
   

   

Local PHP Security Checker

To check for security vulnerabilities in your Laravel packages, you can use Local PHP Security Checker.

Enlightn has a similar tool called enlightn/security-checker.

However, I prefer Local PHP Security Checker for its portability, and it can be used with other PHP frameworks.

1. Download and install:

   curl -sL  https://github.com/fabpot/local-php-security-checker/releases/download/v2.0.6/local-php-security-checker_2.0.6_linux_amd64 --output /tmp/local-php-security-checker
   
   chmod +x /tmp/local-php-security-checker
   
   sudo mv /tmp/local-php-security-checker /usr/bin/
   

2. Run the following command:

   local-php-security-checker --no-dev