Archive for the 'Code Audit' Category

WordPress Exploit Scanner

Wednesday, July 9th, 2008

This WordPress plugin searches the files on your site for a few known strings sometimes used by hackers, and lists them with code fragments taken from the files.

Posted in Code Audit, Vuln. Scanner, Penetration Testing, Web Applications | No Comments »

GIAC Secure Software Programmer (GSSP) Certification

Tuesday, November 6th, 2007

Ha! Finally there is an official method to tell apart the security minded programmers from the rest of the coder crowd. GIAC Secure Software Programmer (GSSP) Certification is a brand new SANS exam designed to test the security knowledge of developers in an effort to reduce the application security vulnerabilities.
It is an efficient example […]

Posted in Code Audit | No Comments »

Pixy is a Free PHP Code Audit Tool

Tuesday, October 30th, 2007

today I’ve found a PHP XSS and SQL injection source code analyzer called Pixy

Posted in Code Audit | No Comments »

XSSDetect - Free Visual Studio Plugin

Tuesday, October 23rd, 2007

NEW! Microsoft just released XSSDetect, which is a free VisualStudio plugin designed to detect XSS vulnerabilities in managed code.

Posted in Code Audit | 1 Comment »

Software Security Assurance: A Framework for Software Vulnerability Management and Audit

Friday, June 1st, 2007

Ounce Labs released a valuable resource for everybody involved in the Software Security business. “Software Security Assurance: A Framework for Software Vulnerability Management and Audit” is more than a framework, it’s a call to action driven by the need for better understanding of roles and responsibilities in software security assurance.

Posted in Reviews, Code Audit, Framework | No Comments »

Now You can code More with less effort

Saturday, April 21st, 2007

One way to avoid re-inventing the wheel and also learn more about the source code you intend to use is to use a source code search engine.

Posted in Code Audit, Fingerprinting | No Comments »

Java Source Code Audit Tools

Saturday, January 27th, 2007

Java Source Code Audit tools

Posted in Code Audit, Web Applications, Tools | No Comments »