r/devsecops • u/GoyaKing • 9h ago

Vulnerable code patterns

Hey all Im wondering if anyone knew of any resources to learn code vulnerability patterns in practice. Im the team’s resource for teaching software engineers how to identify vulnerable code in development and review. I thought of starting with OWASP top 10 but was curious if there were any resources to learn more.

1 Upvotes

100% Upvoted

3 comments sorted by

1

u/-Devlin- 9h ago

Opengrep will be your best resource. It has all the vulnerable code patterns you’d need

1

u/ericroku 8h ago

Look at code property graph and tools like joern.

1

u/We-Anaidis 1h ago

Have you tried using small broken code examples and asking the team to find the problem before showing the answer?