I’ve been working on a tool that I call “Watchtower” for the last several weeks. Watchtower is a platform- and language-agnostic Static Code Analysis tool that can be used for code audits and incident-response. The project is hosted here:

https://github.com/chrisallenlane/watchtower

Check out the README to get a feel for how it works.

In the meantime, that’s all I can say, because I’m hoping to publish a more detailed introduction in an upcoming issue of 2600. If that submission is rejected, more details will later be made available here.

I recently published a new plugin to the WordPress.org Plugins Directory. I call it Foresight. It is available for download here:

http://wordpress.org/extend/plugins/foresight/

Foresight is a simple plugin that serves a simple purpose: it helps blog administrators to stay current on known exploits for WordPress and for WordPress plugins.

Read the rest of this entry »