All Questions
Tagged with code-review web-application
13 questions
0
votes
1
answer
4k
views
What are things we look to find Access Control Database?
Currently Working on HP Fortify Access Control Database category.
Source:
userId = request.getParameter(Constants.USERID).trim();
Sink:
pstm1.setString(3,userId.trim());
I saw the definition ...
- 449
2
votes
1
answer
7k
views
Path Manipulation Vulnerability
Currently I am working in code review process.
I have few doubts regrading Path Manipulation Vulnerability.
Some portion of the Path is already hard coded and with extension
public class ReadFile {
...
- 449
1
vote
2
answers
256
views
Mitigating security risks of using open-source software
The title sounds like a trolling question but it is not (I'm a huge fan of OSS).
I have a small company with a web app that is undergoing infosec review with a Fortune 100 company. The questions I ...
- 121
1
vote
0
answers
172
views
What web application vulnerabilites are most likey to be found in a source code review vs a grey box pentest?
What type of vulnerabilities would be found additional in a source code review vs a pentest?
If my organization performs regular grey box pentests, do we really require to perform source code reviews?...
- 11
1
vote
1
answer
152
views
Resources for reviewing multi-tiered webabbs in Spring, Hibernate or JAX-WS
I need some pointers to any resources (videos from any conferences or general videos, pdf, anything) for secure source code reviewing of multi-tiered web-apps in JAX-WS, Spring or Hibernate. I am ...
- 507
8
votes
4
answers
4k
views
Static code review approach
My questions is related with static code analysis approach used by Veracode vs Fortify/AppScan.
Veracode – Finds security flaws in application binaries and bytecode without requiring source
Fortify/...
3
votes
2
answers
719
views
Box web application security review - legality? [closed]
is it legal to do a security review/pentest of a web application that we bought and operate on our servers? Meaning, the whole infrastructure is ours + we bought a licence for the software. Can we do ...
- 49
3
votes
5
answers
1k
views
What is the security flaw in this example of "magic parameters"?
I am reading OWASP Testing Guide v3:
Example 1: Magic Parameters
Imagine a simple web application that accepts a name-value pair of “magic” and then the value. For simplicity, the GET request may be: ...
- 457
5
votes
4
answers
402
views
How to best present 'Security Vulnerability Feedback' to devs in the IDE (like VisualStudio)
I posted today a pretty cool PoC where I was able to provide real-time 'security vulnerability feedback' to a developer as he is writing code in VisualStudio.
You can see the video at Real-time ...
- 629
6
votes
2
answers
2k
views
HTML 5 Security Code Scanner
Are there code scanners in the market that scan HTML 5 code?
Does anyone have a list of tags of specific CORS configurations that need/can be scanned?
- 1,204
8
votes
6
answers
8k
views
Fortify360 - Sinks & Sources - Vulnerability count
In an application security environment, I use Fortify Software's Fortify360 on a daily basis.
One of my biggest hurdles is explaining the numbers (sources vs sinks)
Fortify flags each location in ...
- 2,006
10
votes
3
answers
1k
views
Finding security consultant for doing in-depth code review?
We have a PHP application that we know has poor coding practices (because the developers did not have a good understanding of PHP / programming fundamentals). This could lead to the scenario where we ...
- 1,087
16
votes
3
answers
1k
views
Getting a manual security code review done - What to watch out for?
We have a PHP application that we want to get code reviewed from an external security consultant, but I'm not clear on "how to" go about that process.
We did specify what kind of tests he should be ...
matt74tm