CodePhantom is a high-performance, modular framework that empowers developers and security engineers to detect vulnerabilities in software applications. It offers Static Analysis, Dynamic Analysis, and Fuzz Testing capabilities through a modern, extensible architecture.
- Static Code Analysis: Uncover vulnerabilities in source code.
- Dynamic Analysis: Monitor application behavior at runtime.
- Fuzz Testing: Identify edge-case vulnerabilities.
- RESTful API and CLI: Easy integration into CI/CD pipelines.
- Web-Based Interface: Visualize analysis reports and trends.
- Java: Version 17 or higher
- Build Tool: Gradle or Maven
- OS: Cross-platform (Linux, macOS, Windows)
-
Clone the repository:
git clone https://github.com/areenzor/CodePhantom.git cd CodePhantom
-
Build the project using Gradle:
./gradlew build
Or build using Maven:
mvn clean package
-
Command-Line Interface (CLI):
java -jar build/libs/CodePhantom-1.0.0.jar
-
Web Interface:
- Start the web server:
java -jar build/libs/CodePhantom-1.0.0.jar --web
- Open your browser and navigate to
http://localhost:8080
.
- Start the web server:
- Using Gradle:
./gradlew test
- Using Maven:
mvn test
CodePhantom/
├── core/ # Application core and main components
├── analyzers/ # Static, dynamic, and fuzz testing modules
├── security/ # Security utilities (e.g., sanitizers)
├── utils/ # Helper classes (e.g., logging, file utilities)
├── ui/ # Web and CLI interfaces
├── api/ # RESTful API implementation
├── resources/ # Configuration, templates, and test data
├── test/ # Unit and integration tests
Contributions are welcome! Please follow these steps to contribute:
- Fork the repository.
- Create a feature branch:
git checkout -b feature/your-feature
- Commit changes and push to your branch.
- Create a pull request detailing your changes.
Please ensure that your code adheres to the project’s coding style and passes all tests.
This project is licensed under the Apache License 2.0.
For questions, feedback, or support:
- GitHub Issues: Create an Issue
Special thanks to the open-source community and contributors for their continued support in making CodePhantom a cutting-edge tool for software security analysis.