Static security scanner for Lua in embedded firmware: finds remote code execution.
$ luarocks install luasec-scanner
luasec finds untrusted data reaching command execution, dynamic code loading andfirmware-specific sinks in Lua code from routers and IoT devices, and reports itas plain text, JSON, SARIF or HTML with a 0-100 health score.
root
