HackTheCore // Code Review

Domain overview

Code review shortens the path from root cause to credible remediation. It helps explain not just that something breaks, but exactly where the trust boundary failed and why it matters.

Selected public references

Semgrep Documentationsemgrep.dev/docs/
CodeQL Documentationcodeql.github.com/docs/
OWASP Code Review Guideowasp.org/www-project-code-review-guide/
MITRE CWEcwe.mitre.org/top25/archive/2024/2024_cwe_top25.html
OWASP WSTG · 03 Source Code Reviewowasp.org/www-project-web-security-testing-guide/latest/2-Testing_Techniques_Explained/03-Source_Code_Review
GitHub · GitHub / codeqlgithub.com/github/codeql

Topic index

brief

Foundations & Automated Source Code Auditing

Foundations & Automated Source Code Auditing: untrusted data flows, authorization decisions, secrets and dependency trust across the software lifecycle.

10 focus points4 references

brief

C Source Code Auditing

C# Source Code Auditing: untrusted data flows, authorization decisions, secrets and dependency trust across the software lifecycle.

10 focus points4 references

brief

Java Source Code Auditing

Java Source Code Auditing: untrusted data flows, authorization decisions, secrets and dependency trust across the software lifecycle.

10 focus points4 references

brief

Php Source Code Auditing

Php Source Code Auditing: untrusted data flows, authorization decisions, secrets and dependency trust across the software lifecycle.

10 focus points4 references

brief

Node.js Source Code Auditing

Node.js Source Code Auditing: untrusted data flows, authorization decisions, secrets and dependency trust across the software lifecycle.

4 focus points4 references

brief

Python Source Code Auditing

Python Source Code Auditing: untrusted data flows, authorization decisions, secrets and dependency trust across the software lifecycle.

5 focus points4 references

brief

Go Source Code Auditing

Go Source Code Auditing: untrusted data flows, authorization decisions, secrets and dependency trust across the software lifecycle.

8 focus points4 references

brief

Ruby Source Code Auditing

Ruby Source Code Auditing: untrusted data flows, authorization decisions, secrets and dependency trust across the software lifecycle.

10 focus points4 references

brief

iOS Source Code Auditing

iOS Source Code Auditing: client storage, platform trust, runtime instrumentation and transport behavior across mobile applications.

5 focus points4 references

brief

Android Source Code Auditing

Android Source Code Auditing: client storage, platform trust, runtime instrumentation and transport behavior across mobile applications.

8 focus points4 references

brief

Artifacts, Git, Docker & Dependency Auditing

Artifacts, Git, Docker & Dependency Auditing: untrusted data flows, authorization decisions, secrets and dependency trust across the software lifecycle.

3 focus points4 references