⚡
RUDRA
SECURITY INTELLIGENCE · WAVEYUG
▸ WAVEYUG.IN v411
🌙
🛡️
RUDRA v413
— 9-Stage Pipeline · 800+ Rules · PHP · JS · Python · Ruby · Java · Go · C++ · India Compliance · Claude AI Fix ·
v413: 🔧 GraphQL FP fix — 'No Query Depth' contextFilter no longer self-masks on empty validationRules:[]; 'HTTP Batching Enabled' rule paren-truncation fixed + now requires HTTP-mount evidence (GraphQL benchmark 50%→100%) | v412: 🔧 Multi-line rule engine fix (window-based [\s\S] matching, RACE 44%→89%) · NOSQL-001 word-boundary fix · Non-Atomic Arithmetic now transaction-aware · Added fread+fwrite/flock race rule · benchmark lang→ext mapping fix (python/ruby/docker) | v411: 🔧 Added .rsc scan-session export/import (SHA-256 signed, self-updating version label, Web-Crypto fallback, 100MB import cap, session-shape validation) · Added HRE_RACE_10/11 (for-await global mutation, Promise.all+push race) · Fixed CSRF false-negative (jwt.verify proximity window 20→6 lines) | v409: 🔧 XXE-OOB php:// wrapper false-positive fixed (php://input always safe) · Added xml2js fake-option hygiene check (LOW, not CRITICAL) · Fixed PHP bare-word taint bug (masked string literals before assignment regex — was tainting words like "action"/"client_id" globally) · NoSQL destructuring assignment now tracked ({a,b}=req.body) · Sensitive-data-exposure + XSS-echo false positives fixed for JSON API responses (json_encode exemption) | v406: 🔧 PATH-006 concat-pattern miss fixed (68%→95% conf, HIGH→CRITICAL) · Added HRE_JWT_05 (RS256→HS256 algorithm-confusion rule) · Restored inline rudra-main.css + rudra-ai.js (were 404ing as external refs) | v389: 🔧 Benchmark bars fix · Firebase 8-collection support · renderTrainingDashboard implemented · fetchFirebaseSample 4-level fallback | v388: 🧠 AI Panel Dashboard button · BASE_RULES 35 patterns | v387: 🎯 Accuracy Benchmark Embedded | v312: 📊 CVSS 3.1 Score Per Finding · Bug Bounty Ready | v310: 🐙 GitHub Multi-File Repo Scan
✕
// RUDRA v413 — 9-Stage Pipeline · 800+ Rules · PHP/JS/Python/Java/Go/C++ · Framework Taint Engine · PHP/JS/Python/Java/Go/C++/Android · India Compliance (DPDPA 2023)
⌨️ Code Paste
🐙 GitHub Link
📁 File / ZIP / APK
🧠 AI Training
XSS
SQL Injection
Secret Keys
Cmd Injection
Path Traversal
🧠 Claude AI Verify
🛡️
SENTINEL AI — ACTIVE
Built-in · AST Semantic Flow · No key needed
LANGUAGE:
JavaScript (.js)
PHP (.php)
Python (.py)
TypeScript (.ts)
Java (.java)
HTML (.html)
Go (.go)
C# (.cs)
Ruby (.rb)
React JSX (.jsx)
React TSX (.tsx)
Shell Script (.sh)
YAML (.yaml)
JSON (.json)
ENV (.env)
SQL (.sql)
Rust (.rs)
Kotlin (.kt)
Swift (.swift)
Vue (.vue)
Terraform (.tf)
XML (.xml)
✓ Auto-detect active
⚡ SCAN CODE NOW
GITHUB URL — FILE OR REPO:
FETCH & SCAN
MAX FILES:
10 files
20 files
50 files
100 files
BRANCH:
FETCHING REPO...
✅ SUPPORTED:
github.com/
user/repo
— 🆕 Full repo scan (src/, config/, routes/...)
github.com/user/repo/blob/branch/
file.php
— Single file
raw.githubusercontent.com/user/repo/branch/
file.py
gist.github.com/
gist_id
Secrets/Keys
XSS
SQL Injection
Cmd Injection
Path Traversal
🧠 Claude AI Verify
🛡️
SENTINEL AI — ACTIVE
Built-in · GitHub Code Verify · No key needed
📁
DROP FILES HERE
or click to browse — multiple files OK
.php
.js / .ts
.py
.java
.html
.cpp / .c
.env
.json / .yml
.sql
.zip 📦 full extract
.apk 📱 string scan
QUEUED FILES:
XSS
SQL Injection
Secrets/Keys
Cmd Injection
Path Traversal
🧠 Claude AI Verify
🛡️
SENTINEL AI — ACTIVE
Built-in · File Deep Scan · No key needed
⚡ SCAN FILE(S) NOW
INITIALIZING...
SCANNING... 0%
◌ Load
◌ Pattern Match
◌ Vuln Check
◌ Risk Score
◌ Report
⟳ New Scan
📋 Copy Report
⬇️ Export JSON
💾 Export .rsc
📂 Import .rsc
🧠 Export JSONL
▾
🤖 OpenAI
fine-tune
🤗 HuggingFace
datasets
🦥 Unsloth/LoRA
Alpaca
📦 Raw
current
🔷 Export SARIF
🚀 CI/CD Kit
📄 Export PDF
📋 Compliance PDF
⟺ Diff View
🔗 Share
🖨️ Print
✅ Download Fixed Code
🔄 Re-Scan Fixed Code
🎯 Bug Bounty Report
🧠
AI TRAINING DASHBOARD
Pehle code scan karo — training dataset stats yahan dikhenge.
🧠 TRAINING DATASET DASHBOARD
0
TOTAL RECORDS
0
FIX VERIFIED
0
HIGH QUALITY ≥80
0
LANGUAGES
LANGUAGE BREAKDOWN
CWE COVERAGE
EXPORT CONTROLS
🤖 OpenAI (fine-tune API)
🤗 HuggingFace (datasets)
🦥 Unsloth/LoRA (Alpaca)
📦 Raw (current format)
Quality: High only
80/10/10 Split ✓
🧠 Export JSONL
📊 Firebase Count
🔄 Backfill Fixes
📋 FINE-TUNING INSTRUCTIONS
SCANNING LIVE
0
vulnerabilities found
✅ Report link copied to clipboard!
⟺ BEFORE / AFTER — CODE DIFF
✕
🔴 ORIGINAL (VULNERABLE)
🟢 FIXED (PATCHED)
📋 SCAN HISTORY — COMPARE & DIFF
✕
SELECT 2 SCANS TO COMPARE — kya fix hua, kya naya aaya:
📊 FIREBASE — LIVE DATA COUNT
✕
⏳ Firebase se data fetch ho raha hai...
🔄 Refresh
🔍 Preview
3 sample records
✕
Yeh sirf 3 sample records hain — actual data kaafi zyada hai
🎯 ACCURACY TEST
🔧 FIX TESTS
🔧 FIX PATCHER UNIT TESTS
v270 — +26 rules: NoSQL-P7 · JWT-P8 · CORS-P9 · CRLF-P10 · Deserialization-P4
✕ CLOSE
—
TOTAL TESTS
—
PASSED ✅
—
FAILED ❌
—
PASS RATE
▶ RUN FIX PATCHER TESTS
READY — v271: +12 tests (T67-T78): Go JWT·Go CRLF·BizLogic + 13 new Go security rules + 7 advanced BizLogic rules
// RUDRA Fix Patcher Tests v1.4 — v271: +T67-T78 (Go JWT·Go CRLF·BizLogic) | +13 Go rules | +7 BizLogic rules
// Tests T1-T8: SQLi·Hardcoded·FileUpload | T9-T15: XSS·Entropy | T16-T27: CMD | T28-T32: XXE | T33-T40: CSRF
// T41-T46: NoSQL | T47-T52: JWT | T53-T56: CORS | T57-T60: CRLF | T61-T66: Deser | T67-T70: Go JWT | T71-T74: Go CRLF | T75-T78: BizLogic
// Press RUN to execute...
🎯 CYBERSCAN ACCURACY BENCHMARK
TRUE POSITIVE · FALSE POSITIVE · FALSE NEGATIVE · PRECISION · RECALL
✕ CLOSE
—
TOTAL TESTS
—
TRUE POS (TP)
—
FALSE POS (FP)
—
FALSE NEG (FN)
—
TRUE NEG (TN)
—
PRECISION
—
RECALL
—
F1 SCORE
OVERALL ACCURACY
—
PRECISION
—
RECALL (DETECTION RATE)
—
—
▶ RUN ACCURACY BENCHMARK
READY v411 — Click RUN to start benchmark (41 test cases embedded)
// RUDRA Accuracy Benchmark v400 — Embedded self-contained benchmark (41 test cases: +15 SC v400 world-class rules)
// Tests: TP·TN·FP·FN across SQLi, XSS, CMD, PATH, SECRETS, SSRF categories
// v390: +6 new rules — XSS indirect echo, SQLi interpolation, SSRF file_get_contents, hardcoded creds, insecure cookie, open redirect superglobal
// Press RUN to execute...