Tagged Questions
0
votes
3answers
310 views
Code auditing and/or fuzzing - Books and resources
I've read the 'Shellcoder's Handbook' as well as 'The Art of Exploitation', and appreciated both a lot. Now I'm looking for additional resources delving into vulnerability spotting, code auditing, and ...
5
votes
2answers
316 views
How do you organize a code review / static analysis report?
Recently I get involved in a security code review.
I found many format string, buffer overflow and dangerous libc function call.
Right now I need to write down a report with all the stuff founded ...
