--exploits flag not working ?

[LucasDemea]

Hi, thanks for this amazing tool !
When I try to run a scan with the --exploits flags, it seems it is not working as intended :

This is the command I enter :

php scanner web/app/ --exploits="double_var2"

I get :

Exploit to search: double_var2 Start scanning...

And then :

Evil code found: [!] Function (create_function) [line 61] - Potentially dangerous function 'create_function'

Shouldn't I get only double_var exploits detection ?
Am I missing something ?

[marcocesarato]

Hi, thank for your support and for reporting this issue.
You need to add also php scanner web/app/ --exploits="double_var2" --only-exploits but I checked and --only-exploits/--only-functions/--only-signatures flags was bugged because about 1 month ago the check system changed so some limitations didn't work anymore.
Fixed on 0.8.3.
Let me know if is fixed also for you.

[LucasDemea]

It is working now. Thank you !