
Static PHP code scanner that detects SQL injection, XSS, SSRF, LFI, command injection, insecure deserialization, and other web vulnerabilities in single files or entire directories.
the script can find
python code.py file.php -this will scan one file
python code.py -this will scan full folder (.)
python code.py path -will scan all subfolders and files