OWASP is a reputable security organisation, right? Are these OWASP tools: owasp.org/index.php/Source_Code_Analysis_Tools good to analyse source-codes on vulnerabilities?

Other alternatives to scan PHP and ASP.NET source code?

My wireless card is on channel 2 but I am picking up beacon frames from aps on channel 1 using scapy sniff?

I'm a complete beginner to infosec, but I read somewhere that if you are monitoring one channel you might intercept packets from close channels @Matt

because frequencies are close, so if you're in channel 2 you might get some "interference" from channel 1 or 3

Thank you @IanC. I am a newcomer to infosec as well. Your info makes sense since the channels I'm intercepting seem to be on the same 20Mhz. Would you possibly know the URL or source of your info?

It isn't completely related to your issue, but it mentions channel overlaping

@IanC just to share information read the last comment of this link. security.stackexchange.com/questions/130764/…

@IanC he is saying that channel overlapping only causes interference. Not intercepting a recognizable message. So I'm back to square one haha

maybe small packets can "survive" during those overlaps? I'm not sure :p

I think it's unlikely you would be able to communicate with a AP in another channel, but maybe small packets can still pass the boundaries between close frequency channels

you didn't find anything on the stackexchange when looking for "channel overlaping"?

Nothing that explains what is happening... but I could be doing something wrong I guess I'll figure it out.

@MattClendenen, maybe someone more experienced will answer your doubt, post it on the website (I think the chat itself isn't as active)

@MattClendenen, just realized the question you sent me was actually yours! my bad :p

@IanC haha no worries

@O'Niel OWASP is indeed a reputable organization. "Good" when referring to static analysis tools is highly dependent on the skill of the individuals operating and tuning the tools. I can't speak to the tools that analyze PHP code, but for .NET the "free" pickings are pretty slim. There are some good commercial tools though.

BTW code analysis is very immature and very active area of research, so there's big focus on analyzing the machine code but also source code

Okay, thanks a lot for the answer.