DRSource is a comprehensive static code analysis tool for detecting security vulnerabilities in Java and JSP projects.

• Vulnerability detection for Java and JSP files
• Multiple vulnerability type scanning
• Extensible pattern matching
• Detailed reporting
• CLI interface

pip install .

# Scan all vulnerability types
dr_source /path/to/project

# Scan specific vulnerability types
dr_source /path/to/project -v XSS -v SQL_INJECTION

# Optional output file
drsource /path/to/java/project -o report.json

XSS (Cross-Site Scripting) SQL Injection Command Injection Path Traversal Deserialization Risks Sensitive Data Exposure

Customize vulnerability detection by modifying detection patterns in the source code.

Open issues and pull requests are welcome.