Handy Commands — Everyday One-Liners
Each pass unpacks the current zips into a folder named after the archive and deletes the archive; if that reveals new zips, the loop runs again.…
12 docs tagged with "Source Code"
View all tagsInsecurFun
InsecurFun — Secure Code Review.
Java Code Analysis Basics for Pentesters
These are attacker-controlled inputs entering the application.
Kotlin Backend Components and Security Testing
Kotlin Backend Components and Security Testing — Secure Code Review.
Python Secure Code Review Notes for Pentesters
1. User Input Sources (Taint Sources)
SAST - Static Application Security Testing
A secure code review is a line-by-line analysis of the source code of an application, usually performed to find any security risks overlooked during the…
SAST / Secure Code Review — Linux (Bash + grep)
SAST / Secure Code Review — Linux (Bash + grep) — Secure Code Review.
SAST / Secure Code Review — Linux (Bash + ripgrep)
SAST / Secure Code Review — Linux (Bash + ripgrep) — Secure Code Review.
SAST / Secure Code Review — Windows (PowerShell)
SAST / Secure Code Review — Windows (PowerShell) — Secure Code Review.
Secure Code Review — References
Downloadable reference documents and PDFs for Secure Code Review.
Source Vulnerable and Fix example
What vulnerability do you see in this code?
TroubleShoot
The error you're seeing is caused by the SonarQube Scanner trying to analyze Java files in your project without having access to compiled Java classes…