Source Code Analysis For Pentesters

#######################################
# Source Code Analysis For Pentesters #
#######################################

The video from the previous version of the class:
https://s3.amazonaws.com/StrategicSec-Videos/2015/2015-12-30+09.08+Source+Code+Analysis+For+Pentesters.mp4


Day 1 Class video:
https://s3.amazonaws.com/StrategicSec-Videos/2016/SourceCodeAnalysisForPentesters/2016-10-31+19.33+Source+Code+Analysis+For+Pentesters.mp4


Download the course slides:
https://s3.amazonaws.com/StrategicSec-Files/UltimateAppSec/UltimateAppSec-Week1.pptx






				Latin (romance language)	C


Spanish		Italian		French		Portugese		Romainian



C++		Java		PHP		Perl			C#


Syntax (the way you say things changes between the languages)



def salestax()
	x * .07


def propertytax()
	x * .07



1. Input validation
	Make sure the data coming in is EXACTLY what you want

2. Output validation
	Make sure the data going is EXACTLY what you want

3. Session validation
	Make sure who's running it is EXACTLY who you expect to be running it




Homework:
Python video tutorial series (43 videos):
https://www.youtube.com/playlist?list=PLEA1FEF17E1E5C0DA
Your task is to create a word document with screenshots that proves you have performed 25 of the videos in the playlist listed above. Submit the results via email in an MS Word document with (naming convention example: YourFirstName-YourLastName-Source-Code-Analysis-For-Pentesters-Python-Homework.docx)


C Programming video tutorial series (58 videos):
https://www.youtube.com/playlist?list=PL6gx4Cwl9DGAKIXv8Yr6nhGJ9Vlcjyymq
Your task is to create a word document with screenshots that proves you have performed 25 of the videos in the playlist listed above. Submit the results via email in an MS Word document with (naming convention example: YourFirstName-YourLastName-Source-Code-Analysis-For-Pentesters-C-Homework.docx)


Java Programming video tutorial series (87 videos):
https://www.youtube.com/playlist?list=PLFE2CE09D83EE3E28
Your task is to create a word document with screenshots that proves you have performed 25 of the videos in the playlist listed above. Submit the results via email in an MS Word document with (naming convention example: YourFirstName-YourLastName-Source-Code-Analysis-For-Pentesters-Java-Homework.docx)




---------------------------------------------------------------------------------------------------------------------------


VMWare & Class Virtual Machine
------------------------------
Download VMWare Player if you are not currently running a version of Vmware that is newer than VMWare Workstation 11, Vmware Fusion 7, or Vmware Player 11. VMWare Player is free and you download it from here:
https://my.vmware.com/web/vmware/free#desktop_end_user_computing/vmware_workstation_player/12_0



Download the course virtual machines:
-------------------------------------
https://s3.amazonaws.com/StrategicSec-VMs/StrategicsecUbuntu14.zip
username:    strategicsec
password:    strategicsec



###############################################################
# Rough Auditing Tool for Security (RATS)                     #
# https://code.google.com/p/rough-auditing-tool-for-security/ #
###############################################################
cd ~/toolz
mkdir rats
cd rats
wget https://rough-auditing-tool-for-security.googlecode.com/files/rats-2.4.tgz
tar -zxvf rats-2.4.tgz
cd rats-2.4
./configure && make
sudo make install



rats -h


# -i 'report functions that accept external input'
# -l 'force the specified langauge to be used' (perl, ruby, python, c, php)
# --context 'Display the line of code that caused the problem report'
# --resultsonly 'No header, footer, or status information'


wget --no-check-certificate https://dl.packetstormsecurity.net/UNIX/scanners/propecia.c

rats -i -l C --context propecia.c



cd /home/strategicsec/toolz/rats/rats-2.4

ls | grep xml

cat rats-c.xml | less


rats -i -l C --db rats-c.xml --context propecia.c

rats -i -l C --context --resultsonly propecia.c

rats -i -l Python --context --resultsonly ../../MultiInjector.py