TrojanSourceFinder
TrojanSourceFinder helps developers detect "Trojan Source" vulnerability in source code.
Trojan Source vulnerability allows an attacker to make malicious code appear innocent. In general, the attacker tries to lure by passing his code off as a comment (visually). It is a serious threat because it concerns many languages. Projects with multiple "untrusted" sources could be concerned
Detect evil
Detect Trojan Source
> Help the detection of Trojan source for manual code review or with CI/CD pipelines
To detect Trojan source in file
tsFinder <filename>
Visualize Trojan Source
> Visualize how the code is really interpreted by machines/compiler
tsFinder is deliberately not very verbose. By default, it will only output if Trojan Source code has been detected. To have more verbosity and visualize the dangerous line add the flag -v