GRAUDIT(1)

πŸ‘‘ GRAUDIT β€” the source code auditing bestie πŸ’–

okay so hi, welcome to the graudit manual, aka the GRAUDIT(1) page but make it cute. it lives in the General Commands Manual section and it's here to help you sniff out sketchy code. let's get into it, no cap. ✨


🌸 NAME 🌸

graudit β€” source code auditing tool

like. that's literally her whole job. she audits ur source code. iconic behavior honestly. πŸŽ€


πŸ¦‹ SYNOPSIS πŸ¦‹

graudit [-options] /path/to/scan

πŸ’… DESCRIPTION πŸ’…

so bestie, graudit is a simple script plus a whole wardrobe of signature sets, and together they let you find potential security flaws in source code by leaning on the GNU utility grep. she's not doing anything wild under the hood, she's just grep with taste and a mission. πŸ•΅οΈβ€β™€οΈ

her arguments are as follows, and yes we're going through all of them:

  • -A β€” Scan ALL files. no skips, no hiding, we're looking at everything. πŸ‘€
  • -c num β€” Number of lines of context to display. Default is 2, which means one line before and one line after the matching line. so it's giving "here's the receipt, here's the vibe, here's the aftermath". 🧾
  • -d database β€” Signature database to use. pick ur flavor of suspicion. πŸ’Ύ
  • -h β€” Print short help message. for when ur lost and need a lil hand-hold. 🫢
  • -i β€” Case in-sensitive search. Password and password and PASSWORD are all the same girlie to her. πŸ™ˆ
  • -l β€” Lists available database. window shopping but for signature sets. πŸ›οΈ
  • -L β€” Prints line numbers in a paste friendly format for vim. vim girlies, this one's for you. πŸ’œ
  • -v β€” Print version number. the "who even are you" check. πŸͺͺ
  • -x β€” Exclude files matching this pattern. sometimes u gotta say "not you tho". βœ‹
  • -z β€” Supress colors. no rainbow today, we're being serious. (yes it's spelled "supress" in the original, we don't fix what we love 🫑)
  • -Z β€” High contrast colors. rainbow but with main character energy. 🌈
  • /path/to/scan β€” Directory or files to scan. point her at the thing, she does the thing. πŸ“

✨ the default vibe check ✨

By default, graudit will scan most files and directories under /path/to/scan β€” and the ones she skips are *.gz, *.zip, *.gif, *.jpg, *.png, .svn/, .git/ and .CVS/ β€” using the default signature database and displaying two lines of context with the standard grep colors.

and here's the lil shortcut that makes life easy, bestie:

graudit some/dir/

is the same as

graudit -c 1 -d default some/dir/
wait hold on, isn't -c supposed to default to 2? yeah, she said what she said. that's literally what the manual says, so we're not gonna editorialize. ✨

🚦 EXIT STATUS 🚦

The exit status is 0 if a signature match is found and 1 otherwise. An exit status of 2 means an error occurred.

so basically:

  1. 0 β€” found something πŸ‘€ (yay? yikes? both?)
  2. 1 β€” nothing matched, clean-ish, we move 🧼
  3. 2 β€” something broke, and that's on the error πŸ’€

πŸ”— SEE ALSO πŸ”—

(yes that's exactly how it's written in the original, we're keeping it, it's iconic in a chaotic way πŸ’€)


πŸ’– AUTHORS πŸ’–

graudit was written by Eldar Marcussen β€” http://www.justanotherhacker.com.


πŸŽ€ cute lil sign-off πŸŽ€

this page came to you from the Debian crew, dated June 2, 2010. old but she's still slaying, periodt. πŸ’…βœ¨πŸ¦‹

go scan something, bestie. ily. 🫢🌸

πŸ“¦ where this page comes from