A new option -p has been added to select the pattern to use.
-p P Matching pattern to use: [vulnpatterns, cryptopatterns,
cpatterns]
The 3 default patterns are the following:
- A generic "vulnpatterns" which contain mainly web vulnerability and
common vulnerability messages including CVE numbers.
- A specific "cryptopatterns" to match potential vulnerabilities
matching cryptographic functionalities
- A specific "cpatterns" to match common vulnerabilities in C/C++-like
language.
cryptopatterns and cpatterns still need some more work.