I'm looking for a list of C vulnerabilities like OWASP Top 10

Question

I'm looking for a list of all vulnerabilities that can be present in C so I can practice them all.

I found this: Category:C/C++, but it's not of much use.

Hi and welcome to RE.SE. Finding an exhaustive list (which seems to be what you're asking for) would be impossible as there may well be some no one is aware about. But here are some sources: this answer on SO (in particular the CERT stuff on C here), this PDF (presentation), and of course the book "Writing Secure Code". — 0xC0000022L♦, Jan 17 '20 at 23:58

bereal · Accepted Answer · 2020-01-19 09:36:07Z

2

These CWE lists will help you a lot:

bereal

1033 bronze badges

answered Jan 18 '20 at 10:38

KingAmir

543 bronze badges

Add a comment |

Igor Skochinsky · Accepted Answer · 2020-01-18 20:46:22Z

3

Not a vulnerability list by itself, but SEI CERT C Coding Standard lists many “dangerous” code patterns which can be a source of vulnerabilities.

The book The Art of Software Security Assessment is a little old by now but still contains a lot of valuable advice.

answered Jan 18 '20 at 20:46

Igor Skochinsky♦

33k5 gold badges57 silver badges108 bronze badges

Add a comment |

in70x · Accepted Answer · 2020-01-22 01:45:30Z

1

This is a great resource. You can find most of the material on SEI CERT website but the book is great.

answered Jan 22 '20 at 1:45

in70x

1313 bronze badges

Add a comment |

3 Answers 3