Find Common Vulnerabilities On Your Laravel Applications

Halo, kalau kamu merasa tulisan saya ngebantu kamu, kamu bisa ucapkan terima kasih lewat saweria .

Hello, if you find this article helpful, you can express your gratitude through saweria .

Laravel OWASP

For full information about Laravel OWASP, refer to the Laravel - OWASP Cheat Sheet .

Security & Performance Analysis Tools

Enlightn

Enlightn provides performance and security analysis.

Their documentation is excellent, and their solutions are easy to understand.

1. Install Enlightn

   composer require enlightn/enlightn
   

2. Run the following commands:

   # Show the report in your current session
   php artisan enlightn
   
   # To write the report to a file, use this command
   php artisan enlightn > /tmp/enlightn-output.txt
   

   

Local PHP Security Checker

To check for security vulnerabilities in your Laravel packages, you can use Local PHP Security Checker .

Enlightn has a similar tool called enlightn/security-checker .

However, I prefer Local PHP Security Checker for its portability, and it can be used with other PHP frameworks.

1. Download and install:

   curl -sL  https://github.com/fabpot/local-php-security-checker/releases/download/v2.0.6/local-php-security-checker_2.0.6_linux_amd64 --output /tmp/local-php-security-checker
   
   chmod +x /tmp/local-php-security-checker
   
   sudo mv /tmp/local-php-security-checker /usr/bin/
   

2. Run the following command:

   local-php-security-checker --no-dev