Code Auditing and Reverse Engineering

Windows IT Pro

- Advertise

Code Auditing and Reverse Engineering
View the book table of contents

Author:	Michael Cross
Published:	January 2007
Copyright:	2007
Publisher:	Syngress

The goal of this chapter is for any computer-literate individual to be able to take an already-developed piece of code and determine if it has fundamental security problems.We provide you with a detailed list of problem areas pertaining to various popular programming languages, and show you how to use such a list in assessing the source code of a Web application.

Chapter Contents

HOW TO EFFICIENTLY TRACE THROUGH A PROGRAM
AUDITING AND REVIEWING SELECTED PROGRAMMING LANGUAGES

Java
Java Server Pages
Active Server Pages
Server Side Includes
Python
The Tool Command Language
Practical Extraction and Reporting Language
PHP: Hypertext Preprocessor
C/C++
ColdFusion

LOOKING FOR VULNERABILITIES

Getting the Data from the User
Looking for Buffer Overflows
The str* Family of Functions
The strn* Family of Functions
The *scanf Family of Functions
Other Functions Vulnerable to Buffer Overflows
Checking the Output Given to the User
Format String Vulnerabilities
Cross-Site Scripting
Information Disclosure
Checking for File System Access/Interaction
Checking External Program and Code Execution
Calling External Programs
Dynamic Code Execution
External Objects/Libraries
Checking Structured Query Language (SQL)/Database Queries
Checking Networking and Communication Streams

PUTTING IT ALL TOGETHER
SUMMARY
SOLUTIONS FAST TRACK
FREQUENTLY ASKED QUESTIONS

Pages: 1

go to page 1

ADS BY GOOGLE

FEATURED LINKS

Critical Challenges of ESI & Email Retention
Are you storing too much electronic information? Get expert legal advice and better understanding of what you are required to do as an IT professional.

Become a fan of Windows IT Pro on Facebook!
Join us on Facebook and be a fan of Windows IT Pro!

Sustainable Compliance: Are You Having a Resource Crisis?
Read this white paper to examine trends in compliance and security management and review approaches to reducing the cost and operational burden of compliance.

Rev Up Your IT Know-How with Our Recharged Magazine!
The improved Windows IT Pro provides trusted IT content with an enhanced new look and functionality! Get comprehensive coverage of industry topics, expert advice, and real-world solutions—PLUS access to over 10,000 articles online. Order today!

Get It All with Windows IT Pro VIP
Stock your IT toolbox with every solution ever printed in Windows IT Pro and SQL Server Magazine plus bonus Web-exclusive content on hot topics. Subscribe to receive the VIP CD and a subscription to your choice of Windows IT Pro or SQL Server Magazine!

Order Your Fundamentals CD Today!
Gain an introduction to Exchange, learn server security requirements, and understand how unified communications can play a role in your messaging strategies with this free Exchange CD.

Windows IT Pro Home

About Us

Affiliates / Licensing

Media Kit

SQL

Connected Home

IT Library

SuperSite

FAQ

Wininfo News
Europe Edition

Office & SharePoint Pro

Windows Dev Pro

Windows Excavator