index.htm

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="utf-8">
    <title>Find Security Bugs</title>
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">


    <link rel="shortcut icon" href="images/favicon.png">
    <link href="//fonts.googleapis.com/css?family=Squada+One" rel="stylesheet" type="text/css"/>

    <link href="css/bootstrap.css" rel="stylesheet" media="screen">
    <link href="css/font-awesome.css" rel="stylesheet" media="screen">
    <link href="css/fsb-custom-theme.css" rel="stylesheet" media="screen">
    <link href="css/agency.css" rel="stylesheet" media="screen">
    <link href="css/prism.css" rel="stylesheet" media="screen">

    <!--[if lt IE 9]>
    <script src="https://oss.maxcdn.com/html5shiv/3.7.2/html5shiv.min.js"></script>
    <script src="https://oss.maxcdn.com/respond/1.4.2/respond.min.js"></script>
    <![endif]-->
</head>
<body>


<!--<div class="navbar navbar-default navbar-fixed-top">-->

<div class="navbar navbar-expand-sm fixed-top navbar-dark bg-primary">
    <div class="container">

        <a class="navbar-brand" href="/">{<i class="fa fa-bug"></i>}<span style="display:none">Find Security Bugs</span></a>

        <button class="navbar-toggler" type="button" data-toggle="collapse" data-target="#navbarResponsive" aria-controls="navbarResponsive" aria-expanded="false" aria-label="Toggle navigation">
            <span class="navbar-toggler-icon"></span>
        </button>

        <div id="navbarResponsive" class="navbar-collapse collapse">
            <ul class="nav navbar-nav">
                <li class='active'><a class="nav-link" href="/">Home</a></li>
                <li class="dropdown ">
                    <a href="#" class="nav-link dropdown-toggle" data-toggle="dropdown" role="button" aria-expanded="false">How To <span class="caret"></span></a>
                    <ul class="dropdown-menu" role="menu">
                        <li class="dropdown-header">Use the plugin with..</li>
                        <li><a class="dropdown-item" href="tutorials.htm#Maven">Maven</a></li>
                        <li><a class="dropdown-item" href="tutorials.htm#Eclipse">Eclipse</a></li>
                        <li><a class="dropdown-item" href="tutorials.htm#NetBeans">NetBeans</a></li>
                        <li><a class="dropdown-item" href="tutorials.htm#IntelliJ">IntelliJ</a></li>
                        <li><a class="dropdown-item" href="tutorials.htm#Jenkins">Jenkins</a></li>
                        <li><a class="dropdown-item" href="tutorials.htm#Sonar">Sonar</a></li>
                        <li class="divider"></li>
                        <li class="dropdown-header">Knowledge base</li>
                        <li><a class="dropdown-item" href="security.htm">Getting started in security</a></li>
                    </ul>
                </li>
                <li class=''><a class="nav-link" href="bugs.htm">Bug Patterns</a></li>
                <li class=''><a class="nav-link" href="download.htm">Download</a></li>
            </ul>
            <ul class="nav navbar-nav navbar-right ml-auto">
                <li class=''><a class="nav-link" href="license.htm">License</a></li>
            </ul>
        </div><!--/.nav-collapse -->
    </div>
</div>

<br/><br/>


<div class="container">
    <div class="jumbotron jumbotron-ad hidden-print">
        <div class="row">
            <div class="col-md-8 col-sm-8 text-center">

                <h1>{<i class="fa fa-bug"></i>}&nbsp; Find Security Bugs</h1>

                <p>The SpotBugs plugin for security audits of Java web applications.</p>

                <div class="actions">
                    <a class="btn btn-primary btn-lg" href="download.htm">
                        <i class="fa fa-download"></i>&nbsp;&nbsp;
                        Download version 1.12.0
                    </a>
                    &nbsp;&nbsp;
                    <a class="btn btn-secondary btn-lg" href="https://github.com/find-sec-bugs/find-sec-bugs/releases/latest">
                        <i class="fa fa-bullhorn"></i>&nbsp;&nbsp;
                        View release notes
                    </a>
                </div>
                (Last updated: April 6th, 2022)
            </div>
            <div class="col-md-4 col-sm-4">

                <div class="social-links">
                    <ul style="list-style-type: none;">
                        <li>
                            Spread the word:<br/>
                            <a class='twitter-share-button' data-url='http://find-sec-bugs.github.io/'
                               data-via='h3xstream' href='https://twitter.com/share'>Tweet</a><br/>

                            <div class='fb-like' data-font='lucida grande'
                                 data-href='http://find-sec-bugs.github.io/'
                                 data-layout='button_count' data-send='false' data-show-faces='false' data-width='100'
                                 style='line-height:1.0;display:inline'></div>

                        </li>
                        <li><br/><br/></li>
                        <li>
                            Follow the project:<br/>
                            <iframe class="github-btn"
                                    src="//ghbtns.com/github-btn.html?user=find-sec-bugs&repo=find-sec-bugs&type=watch&count=true"
                                    allowtransparency="true" frameborder="0" scrolling="0" width="100px"
                                    height="20px"></iframe>
                            <br/>
                            <iframe class="github-btn"
                                    src="//ghbtns.com/github-btn.html?user=find-sec-bugs&repo=find-sec-bugs&type=fork&count=true"
                                    allowtransparency="true" frameborder="0" scrolling="0" width="102px"
                                    height="20px"></iframe>
                            <br/>
                            <i class="fa fa-github"></i> <a target="_blank" href="https://github.com/find-sec-bugs/find-sec-bugs/">Visit the GitHub project</a>

                        </li>
                    </ul>
                </div>
            </div> <!-- cols -->
        </div> <!-- row -->
    </div> <!-- jumbotron -->
</div> <!-- container -->


<section id="features" class="feature-list">
    <div class="container">
        <div class="row">
            <div class="col-lg-12 text-center">
                <h2 class="section-heading">Features</h2>
            </div>
        </div>
        <div class="row">
            <div class="col-md-4 col-sm-6">
                <h4><i class="fa fa-crosshairs"></i> 141 bug patterns</h4>
                <p>It can detect <a href="bugs.htm">141 different vulnerability types</a> with over 823 unique API signatures.</p>
            </div>
            <div class="col-md-4 col-sm-6">
                <h4><i class="fa fa-code"></i> Support your frameworks and libraries</h4>
                <p>Cover popular frameworks including Spring-MVC, Struts, Tapestry and many more.</p>
            </div>
            <div class="col-md-4 col-sm-6">
                <h4><i class="fa fa-plug"></i> Integrate with your IDE</h4>
                <p>Plugins are available for <a target="_blank" href="https://spotbugs.readthedocs.io/en/stable/eclipse.html">Eclipse</a>,
                <a target="_blank" href="https://plugins.jetbrains.com/plugin/14014-spotbugs">IntelliJ / Android Studio</a> and
                <a target="_blank" href="https://netbeans.org/kb/docs/java/code-inspect.html#fb">NetBeans</a>.
                Command line integration is available with <a href="http://findbugs.sourceforge.net/manual/anttask.html">Ant</a>
                and <a href="https://github.com/spotbugs/spotbugs-maven-plugin">Maven</a>.</p>
            </div>
            <div class="col-md-4 col-sm-6">
                <h4><i class="fa fa-cogs"></i> Continuous integration</h4>
                <p>Can be used with systems such as <a target="_blank" href="https://github.com/jenkinsci/warnings-ng-plugin">Jenkins</a> and
                <a target="_blank" href="https://github.com/spotbugs/sonar-findbugs">SonarQube</a>.</p>
            </div>
            <div class="col-md-4 col-sm-6">
                <h4><i class="fa fa-check"></i> OWASP TOP 10 and CWE coverage</h4>
                <p>Extensive references are given for each bug patterns with references to OWASP Top 10 and CWE.</p>
            </div>
            <div class="col-md-4 col-sm-6">
                <h4><i class="fa fa-github"></i> Open for contributions</h4>
                <p>The project is open-source and is <a target="_blank" href="https://github.com/find-sec-bugs/find-sec-bugs/graphs/contributors">open for contributions</a>.</p>
            </div>
        </div>
    </div>
</section>


<section id="portfolio" class="bg-light-gray">
    <div class="container">
        <div class="row">
            <div class="col-lg-12 text-center">
                <h2 class="section-heading">Screenshots</h2>
            </div>
        </div>
        <div class="row">
            
            <div class="col-md-4 col-sm-2 portfolio-item">
                <a href="#screenshot0" class="portfolio-link" data-toggle="modal">
                    <div class="portfolio-hover">
                        <div class="portfolio-hover-content">
                            <i class="fa fa-search-plus fa-3x"></i>
                        </div>
                    </div>
                    <img src="images/screens/eclipse.png" class="img-responsive img-fluid" alt="Find Security Bugs Eclipse">
                </a>
                <div class="portfolio-caption">
                    <h4>Eclipse</h4>
                    <p class="text-muted"></p>
                </div>
            </div>
            
            <div class="col-md-4 col-sm-2 portfolio-item">
                <a href="#screenshot1" class="portfolio-link" data-toggle="modal">
                    <div class="portfolio-hover">
                        <div class="portfolio-hover-content">
                            <i class="fa fa-search-plus fa-3x"></i>
                        </div>
                    </div>
                    <img src="images/screens/intellij.png" class="img-responsive img-fluid" alt="Find Security Bugs IntelliJ / Android Studio">
                </a>
                <div class="portfolio-caption">
                    <h4>IntelliJ / Android Studio</h4>
                    <p class="text-muted"></p>
                </div>
            </div>
            
            <div class="col-md-4 col-sm-2 portfolio-item">
                <a href="#screenshot2" class="portfolio-link" data-toggle="modal">
                    <div class="portfolio-hover">
                        <div class="portfolio-hover-content">
                            <i class="fa fa-search-plus fa-3x"></i>
                        </div>
                    </div>
                    <img src="images/screens/sonar.png" class="img-responsive img-fluid" alt="Find Security Bugs Sonar Qube">
                </a>
                <div class="portfolio-caption">
                    <h4>Sonar Qube</h4>
                    <p class="text-muted"></p>
                </div>
            </div>
            
        </div>
    </div>
</section>


<!-- Modal -->
<div class="modal fade" id="screenshot0" tabindex="-1" role="dialog" aria-labelledby="screenshotLabel" aria-hidden="true">
    <div class="modal-dialog modal-lg" role="document">
        <div class="modal-content">
            <div class="modal-header">
                <h2 class="modal-title" id="screenshotLabel0">Eclipse</h2>
                <button type="button" class="close" data-dismiss="modal" aria-label="Close">
                    <span aria-hidden="true">&times;</span>
                </button>
            </div>
            <div class="modal-body">
                <p class="item-intro text-muted"><a target="_blank" href="http://marketplace.eclipse.org/content/findbugs-eclipse-plugin">Eclipse plugin</a> with FindSecurityBugs detectors.</p>
                <img class="img-responsive img-fluid" src="images/screens/eclipse.png" alt="">
            </div>
            <div class="modal-footer">
                <button type="button" class="btn btn-secondary" data-dismiss="modal">Close</button>
            </div>
        </div>
    </div>
</div>

<!-- Modal -->
<div class="modal fade" id="screenshot1" tabindex="-1" role="dialog" aria-labelledby="screenshotLabel" aria-hidden="true">
    <div class="modal-dialog modal-lg" role="document">
        <div class="modal-content">
            <div class="modal-header">
                <h2 class="modal-title" id="screenshotLabel1">IntelliJ / Android Studio</h2>
                <button type="button" class="close" data-dismiss="modal" aria-label="Close">
                    <span aria-hidden="true">&times;</span>
                </button>
            </div>
            <div class="modal-body">
                <p class="item-intro text-muted"><a target="_blank" href="https://plugins.jetbrains.com/plugin/3847?pr=idea">IntelliJ plugin</a> with FindSecurityBugs detectors.</p>
                <img class="img-responsive img-fluid" src="images/screens/intellij.png" alt="">
            </div>
            <div class="modal-footer">
                <button type="button" class="btn btn-secondary" data-dismiss="modal">Close</button>
            </div>
        </div>
    </div>
</div>

<!-- Modal -->
<div class="modal fade" id="screenshot2" tabindex="-1" role="dialog" aria-labelledby="screenshotLabel" aria-hidden="true">
    <div class="modal-dialog modal-lg" role="document">
        <div class="modal-content">
            <div class="modal-header">
                <h2 class="modal-title" id="screenshotLabel2">Sonar Qube</h2>
                <button type="button" class="close" data-dismiss="modal" aria-label="Close">
                    <span aria-hidden="true">&times;</span>
                </button>
            </div>
            <div class="modal-body">
                <p class="item-intro text-muted"><a target="_blank" href="http://docs.sonarqube.org/display/SONAR/Findbugs+Plugin">Sonar Qube</a> with FindBugs plugin (version 3.2+).</p>
                <img class="img-responsive img-fluid" src="images/screens/sonar.png" alt="">
            </div>
            <div class="modal-footer">
                <button type="button" class="btn btn-secondary" data-dismiss="modal">Close</button>
            </div>
        </div>
    </div>
</div>

<!-- Facebook -->
<div id="fb-root"></div>
<script>(function (d, s, id) {
    var js, fjs = d.getElementsByTagName(s)[0];
    if (d.getElementById(id)) return;
    js = d.createElement(s);
    js.id = id;
    js.src = "//connect.facebook.net/en_US/all.js#xfbml=1";
    fjs.parentNode.insertBefore(js, fjs);
}(document, 'script', 'facebook-jssdk'));</script>

<!-- Twitter -->
<script>!function (d, s, id) {
    var js, fjs = d.getElementsByTagName(s)[0];
    if (!d.getElementById(id)) {
        js = d.createElement(s);
        js.id = id;
        js.src = "https://platform.twitter.com/widgets.js";
        fjs.parentNode.insertBefore(js, fjs);
    }
}(document, "script", "twitter-wjs");</script>


<br/><br/>

<footer id="footer" class="footer hidden-print">
    <div class="container text-center">
        <div>
            Find Security Bugs 1.12.0
            <span class="hide-xs">&middot;</span>
            Created by <a target="_blank" href="https://twitter.com/h3xstream">Philippe Arteau</a>
        </div>
        <div>
            Licensed under <a href="license.htm">LGPL</a>
        </div>
    </div>
</footer>

<!-- jQuery (necessary for Bootstrap's JavaScript plugins) -->
<!--<script src="https://ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js"></script>-->
<!-- Include all compiled plugins (below), or include individual files as needed -->
<script src="js/jquery.min.js"></script>
<script src="js/bootstrap.min.js"></script>
<script src="js/fsb-custom.js"></script>
<script src="js/prism.js"></script>

<!-- Google Analytics -->
<script type="text/javascript">
    var _gaq = _gaq || [];
    _gaq.push(['_setAccount', 'UA-34839255-2']);
    _gaq.push(['_trackPageview']);

    (function () {
        var ga = document.createElement('script');
        ga.type = 'text/javascript';
        ga.async = true;
        ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
        var s = document.getElementsByTagName('script')[0];
        s.parentNode.insertBefore(ga, s);
    })();
</script>
</body>
</html>