Browse by Tags

• Development Phase
• Information Gathering
• Practices
• Security
• Sensitive Data
• Test Phase
• VSTS

Security Code Review – Use Visual Studio Bookmarks To Capture Security Findings

How to streamline the process of capturing security flaws during security code review? How to save time and avoid switching between the tools? How to stay focused? In this post I will show my simple technique to capture security flaws using Bookmarks Read More...

Posted 24 January 08 01:38 by alikl | 3 Comments   
Filed under Test Phase, Security, Tools, Code Inspection, Practices

XSSDetect Public Beta now Available!

XSSDetect public beta is now available for download on MSDN. Overview XSSDetect is a static code analysis tool that helps identify Cross-Site Scripting security flaws found within Web applications. It is able to scan compiled managed assemblies (C#, Visual Read More...

Posted 24 October 07 09:21 by alikl | 1 Comments   
Filed under Test Phase, Security, Tools, Code Inspection, Development Phase

Visual Studio 2005 As General Code Search Tool

Visual Studio 2005 has powerful search capabilities. One of my favorites is "Find in Files". Just hit Ctrl+Shift+F (more shortcuts - My Favorite Shortcuts ). Essentially it uses FindStr utility that sits in System32 folder and comes for free with Windows Read More...

Posted 05 June 07 10:50 by alikl | 7 Comments   
Filed under Test Phase, Tools, Code Inspection, VSTS, Practices

Security .Net Code Inspection Using Outlook 2007

In my previous post, Code Inspection - First Look For What To Look For , I've described how to look for sensitive data and hints in the compiled assemblies. The other challenge I was looking to solve is boosting my productivity. So with little magic of Read More...

Posted 26 March 07 03:04 by alikl | 8 Comments   
Filed under Test Phase, Security, Tools, Code Inspection, Development Phase

Code Inspection - First Look For What To Look For

Reposted from Security Code Inspection - First Look For What To Look For for further reuse on this blog. I found it extremely productive to first look for strings in the code. But what strings to look for? And how to look for the strings? Looking into Read More...

Posted 20 March 07 10:13 by alikl | 8 Comments   
Filed under Test Phase, Security, Information Gathering, Sensitive Data, Tools, Code Inspection, Development Phase

Search

This Blog

• Home
• Email