Home/ Questions/Q 691213
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-14T02:31:03+00:00

I would like to ask about the available (free or not) Static and Dynamic

  • 0

I would like to ask about the available (free or not) Static and Dynamic code analysis tools that can be used to C++ applications ESPECIALLY COM and ActiveX.

I am currently using Visual Studio’s /analyze compiler option, which is good and all but I still feel there is lots of analysis to be done.

I’m talking about a C++ application where memory management and code security is of utmost importance.

I’m trying to check for problems relating to security such as memory management, input validation, buffer overflows, exception handling… etc

I’m not interested in, say, inheritance depth or lines of executable code.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    Without a doubt you want to use Axman. This is by far the best ActiveX/Com security testing tool available, and its open source. This was one of the leading tools used in the Month Of Browser Bugs by H.D. Moore, who is also the creator of Metasploit. I I have personally used Axman to find vulnerabilities and write exploit code.

    Axman uses TypeLib to identify all of the components that makeup a COM . This is a type relfection, and it means that Source code is not required. Axman uses reflection to automatically generate fuzz test cases against a COM.

    • 0