Because we can.
- If you have access to a SonarQube instance
- You want to perform deep analysis on the projects in this instance
- You cannot access the source code directly to download
- You are a bug bounty hunter
- There's too much code to download one by one by hand
- Clone this repository
cd sonar-lurk
pip3 install -r requirements.txt
cp .settings.json.example .settings.json
- Set target URL, username and password in
.settings.json
- Run
python3 lurk.py
- Sit back and relax 💤