From 04ae6f955c03450337e1e8a28f37b3b42e46dc2b Mon Sep 17 00:00:00 2001 From: Syed Mohammad Ibrahim <8592115+iamibi@users.noreply.github.com> Date: Wed, 9 Mar 2022 11:32:15 -0500 Subject: [PATCH 1/3] Added report for Secure Code Review on an Open Source project --- Secure Code Review Report.xlsx | Bin 0 -> 14849 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 Secure Code Review Report.xlsx diff --git a/Secure Code Review Report.xlsx b/Secure Code Review Report.xlsx new file mode 100644 index 0000000000000000000000000000000000000000..b75393324cd6f3ea0dcdd0b2af9b06e03ed92b90 GIT binary patch literal 14849 zcmeHu1y>wf);8|$8r_79(H3 z!3vjGj7ZqJ8noPwl?Z_?3>Kw<1>+~N zK{E+4>iLQbjUF8~d-3qs87|kS>|-T0kqlpS%uf~WVP8FQ%zbYi=!>th1E&s&b6FCu zym~@lT*6SSH$XN!&roj&Tx!4$VXtm9xUes=pOcZ|=DE4!vsXdVJdCjuYk6-GAOaCi z#hk5{?_vlZtJaVYX7}_l4Vq zy9_B=FKYLmc-pG=@&dW>Ei%cuEAa-DDMn2^So9KtFf4(LK%J3~+M6a1wV(^4s%JG} z^=(}F$4OIJ0ZXZ+M~FfZJo2Zr8JJ@(CYCF;zGDEA+ebWgRVyCrdXrpdUQ#bZGr;F- z@vJ`dU%m_q*<&iC>}U_HQ&OW8`L_W&&FohbIbK6tu!B`&m*YXvMCF_B8SB5DBpdC( z$`Bj`MD0DbA-`+J6Tsx*;B0H+;9&bl9;;Tjb133QdG(+D1wG^uHOW`*iV1c|+fr3I z*^m`zOd~ZyC=OWh3qvG-(NaHM!eipRhJ{kkhvG zS(ZLLhOjlon7DWyU?fwQO1Qb$I<>s816u6Bs5t4)y&MR_^Oq;}$=KzI%;13*+o$`_ z5TOHLet~t&KvGiVUzmw4oDr0ZbBAjw+W|A8cUzm0i3GH7LSu;-U!>5pvm@m1h4>JB z#o6V~W#JIdr{>^co)Nvm$b~B>^kZ|yk{kTCFi8jQ>%8pCCZ;_Qp_x<$8}!dC9|d8&C= z7>cr9Kf>Bn*j;F8{`^>tk0V0m``Er7Gs36w1+Umlmr?C&^F6eAJO}eg>PZzVTB-@w zNnJsTR%+Kx%vS~U!7Duggx5AciF4BDdqSd)iNwUmxY=d4z*TPBjq+>!1t}JGOOAMv zMGn*okBDpMct%_&|)1R8;O( zbNZb5FM2|9O+)IB$^t@9LcCk$r&h1&)Ttb(&J@yD5PA8wIuymwA|H`Jx9-i*xug>i zF>(lgu1%6#Vu%Q|R1*>%n6c*NJ<_rD$QMNi+IOCAHYQAyctkDE`waKF!5Xl|I8 z3tx?{RmHsDn0s@-gz9!UObowXBSU8FGpJ>Z=l4mhIluVXfd5j|c94$95r@b6gCO_U zyQlrPF9r%Gr(M7Q()pgS@IYWd-+l2PIqTm&@?ZH2^u4@%_vruKN43gFxuN&+3jQ^m z*(1vx6LrOviS$(c1Q}+$nP!cWgw6kE3!k=AUu#j03EUyf>tb@${hkBqJ2?7nKV5kg z8iY4G;DQg*Ve)zs9LD6V=0lJaBs$vZ@k!MgJW{3$dWRrzj6N5G`{03^0yn&XQ4<{PsctBuPv;g|RLJ<+`P=_y3@v?i#zt&KR7#$x}iLu~C1Dlf>3XyzIhR)!zZ z3uNYSo`mk9U*ZntXZMT6N3UK8k% zqR(Gw`qqBZPuyHs?2V5uY`wqf|2COHN^^f+SP&2mMi3C3_dEU>zFn-$&0SrX{v25T zh~wGGYjLa0C}9_Lw}hlyNkcp$C@TwaQJp>ImG;O>BeajasnBDP_O6N06g49Kopi zA&S*31r3T`^@J?CqaY$SY4xo{WveUY80a0?G=zG_4ciPQ&4(U@y*J*}aWWF_~N z{1yob`>?4+5#avZT;}RckhNrbdMks5C4q$vOUel2ByJGVfL%Iv=wk8R#DsGyDW1k>4f4!h2X~gA_&- z9&8OfnOM5NkKb4uUAunzaUbx(-`>LF&hhc;?yNCmMX@wf;Kla9;fG?tOPfz$_Ew)C zz+%Bvz{eo3=dKBxZ|AiCSAf&ot9Pr#ubUIEU#{*#*jIRq){XUs8>p>*00;VQ_}=#$Irxp#(wXll|4MND6E@wb+AS>K&EL;HPc} zkah%KeiA~vH zn|Afas`$_o_<1DtN8i304KK`0>yYMV_lBvGJCB;r;)T8 z!m<#;LvLH6M7>rn^Y|^&zf;b63Z}{oH9z$HS)TPt_%2^1aKcj!kGec*8b|jS*9Igf zh%+W?*UBr~tXYArajGIP`N>J1!rYcVd9Odh45oG(MK47KwiXXq_IaPiOTi7Feb+6E z7o}D=&d540ge6Vo7zZa|JjF_j|( z*Y2L`oFHRTf&OO(SCkHVtGoRLETt7HOlaC?b!)g#yOg6Y9wHB^{ZxlQb3%?H^D~Zp z88LBYOe7~iTJ5QF$2Rl=EUjhP;7|tk2~p#ByD~cDkwqF1|XuH^W15E58hE}o<7wqAwlg46A zV-PNfyU9|g?Xnt8+$Q%KW;fP-dun)xic$?YlYydhsg$Vu2o6)8r|`N2^$fb@Sb2fo zlQ5db1GF#=@e^j?trb>-7~|7nH0;gBa38G))mkq(wK+rOHPS^%`E1}Aq?j=UX`@Jq z* z=n`Sd6plEj4eMw)#|g*2Ju#`{JU!T@(R?_1MXb*$JG86tfksML)76zvBJG{3hVrsMwLpc%MBr4#y zN6{#3J0bx;(iF&ozKQOnzI9Lk^s{a&OuKGk?hvUKA-AGl=iHHN>#jKpJ@%B5*22Ib z^a=}OOJ;Kp3rQ{j-xXrUm7oeFFZ8iBg+$;OnJcjO9`3~vZ2Xh?B$OQ~AzBhA|D!R_ z`i*$y8r-KjqQ9-T`ms@Z72Y3fg!qrv@1OOStChK(In$r#KTEAs?a63-E{s0xCm{qE zj~9;Jc#6&KDL~Q&xmiv!K}+kYvIZL~up1v8jDqJ@g}S&TP1Hdkc~%%4vF9cpmc03h zXohNXnXG1?JPRPJ2r^Of@na<+J4H;94e+VxR@`Ap6h(}o-qNgWpeShA z9c&bh2t8CeCnQ<@X`IW#_u;$G>^(Ian!nW}#jhXOZA@4*8kFMuP}*Yl`ERTp@* zhcSk>*m!iTVww#c#-VQ_1dH?lX{MAD5UWmAROPiux%PEp&RGRPK7px_%X}XnMo^rF zX>5r_NMTdaGsE6+5=M!UK2D-$@18((a18W3YBaq$veYPu|L{}Z;aT#@z4Up@mG441X zyxWzT6PK5cx$+xH*By~vk<*E`=Zvz|AooAm@-@G!ti;xvA0S4dMV4~+&#Lw{h{X_A zb%{mnFA1=Im#>e!IY+4rj+mnmb2g$-VQdyNiI^BLCk|QtIk{<9H&|}FAmD38X8is? znEfLv_D3eH7?n>|c*I#a2z#T=_E?<*`lTpqnaIVxqiC+5OzA`94tT?F@kILI5O$HC zKj;r}0_B_!XFH;C*b)WYmt&RqT~_6RV?+LwNF)-89>Fr$zVR!3;sRm>N{uY*ZLqBa zzbr`GA@^)Dlc^$}%)b#fbjM`$5MjFp)kmAJ^0zLxOh&Tt@m^P?tajn3y2gy)__PVS zXiXclP5kJX(IhoWAv~3>rW^aFew%FsY7VTlU8HeNgP}9Oze={Nw{&m{^2DN!MBOTW z#1r3;)#u*NR`bq@L;ASQ0k%)H7d=O_1bN5|?CO&_iG|U&O!LM%_tkf#^LJ<(H8R{3 zIO~PL^|iqzzH7UiL{YX4;x`V1fkVLF2#Uab)f3OD(gB<&XDw%OB7?%unG2_h~C!QDtG;}Be2?K(M#RMVBz8Ixzb|J zK(NmIn{CFm&dBZEt%yxVw{PGV%8Q?exr*Hl`)nl1=M#{_U7{X-5ZyB|(9Gp)%AHgl zHlW`~A2K=8>DQCV7$bjQ@fean#a zPGYOb097(!Vk3@sRbA}$w|zuE#2H-jgz6xh*TpVWZFk3&$+ds* zFiyqAZVVSs=G9A5_yWa}nC_E2#9+t}kb=lQLr`c(r}+s*P-iz&n2spR3B{Ff%#*dB z%sOlXM>$u4C~!x$*73D+c#E)_e1%}3hbT6_2b}i@7izJV784zGT;!+dVCUmWmcXof z%*6dikMBlbtd_c?W_gn1$atfb+zZpqatAmfYroDY(h=b(u4MKXoG|jISAyU5C~j~O zEqrl-vOcgZ9i}~=cTGA9=i5W9`YATwNLyn6OM$_;)|RmY32nhkwtHvZFB-g`nIZ2h z>qqTwg~6z%CgrteHhLHY#d*#LJ2y#gfvZ|7p|PB=I&Q-BC$c#YPhZx%7c8JX0{Oii z1Gvjn4wXb5(#WWvX7R_8IgO&%leA-Dwz_$!7~cG80MHw<%M8hQ#(gMi!72r)tyQ7! zI2seb>h+G@Xpy|#Ck=1!hK^^B(_+^y?Iml)4?_ZcQbQKO^f4ZmWy>^yz%)m!m( zxBOP&9qI$Qx=GQFUY-3SL@r~cB_|dy4{E0yVXUAARzDG zKiVBGu3i9hmp^(O-I^N?Yn&(nMD=fhD0h`gD&$jlW^PVs#*mq$!mLK0JE3(70i-V| z)VwWRrvY1uKtM^(2`A^1Ns`p&{YHG*&7`E`jlA1na<<|U0W*CtoNuIhk_t83K~`|LX9qi^d|JRsw^SLz{p&G_2s)_`g7M1z8MLNU)K^&3 z(W8Od|IkVymAV~O(M5$*yoft*V-+u~hN0FHzMYMMrBLw*fRx zMy{geIvK&q+S8EYwrmlCHY!51ABkYQE0CxTvc!BOH^QUek`8aJ1&Yp@Zj^LYP;izY z>*Ag74+(8=$WojuF)eA9RAVEkEDtkW@U9lj-_Ycq3%Lu32_wJ&NSjgEOv6Z~iGF65 zn+}(!*5CHfV+4_C`oo4Zod%1CCmXU{pES#My&MYi?h&Rfz{3<12u`WFp4-0U;PFj# zY62{A$Ed9(7T5XDkt{d;{iNhtu|CCY)cD+0$Dp%Z-<^2e$skHCntdwsK#T!g#xG`0 zb_dx15K^?azaArkzHT5goE^#|zs47etoy;m^++BObP@oKehYiu{QSO*im+=vXneew z)0A_C?6dk6AE0x+!3=7FY?miqv`q^OF4Tu0D)b?-LFj`%rGIY7%p`U07Nr+!y@1#L zI^i}mfXdU>mz6_ai8@wL(=RMcO&Sf*w+(U57I<%{xf1ZV(62>%{cCkbeW+O`~LMt&TPy|1fGvux8EQ!iKwMeeGyK zj0R+;1jPceJK?|Odh+=NtVK+~_^9Oc3>5D+HZ@$-@gcM9>p8&n!5WdR5j=~98Wf;Z zD^#t}$h-6B_vcB!U^!`*^(swyXl_Gwzi7J_dOP~6GkRIun0L4M4YMpfoKrhGdo7SL zWFV)6lgH!1S|hxbIjGE?A!MRy@XFECH{GS;PODIE{~dd@NI--3aY{umjILX0O0NU#_LPdT<9t>VE?2E9~I&a#c)owy|9`}rRBt<9csw?@fZPpoa zhs#LT)8%pA?q%XJp5niw-8%J3xyPn?+LS=oF?D_`O6wjP%!i1R)ZD{+@;bZh)WY~d=fE#RC{v!Y zflxLwr182Rw|EeHk3`leL3~25xL2Cng%ukQcaPo0wm(KI1(!>{yAa3_21-;S-1&qT%>Rdb;dbP20c=v(n7QVEP57F#C^*K&9*RP04URJ6OD&& zf6ekJwgw1GOLEoh1DH8=2e0b*uEPb=vP2-Msa%oEMZ2H#MVJ$PO|vOv+nq#K^1AwW zykj7v51%npBe02dH`0j7HnLI61ptMe1fg6|l0Acawh-!RDzNSrN2NHx95o8pt}8?o zWDD7yn5b#wg>-0WKUU6H#qbL&yc#i2U1?!# zN_HN0s9m)}&sj9^uuJ9-We4!d1}Z1iRLG-L%L9UArTnn8a^UYE4Dt~+o?`Yt0cwj& zV4S4#N^l^EFTNhC~JAiZHJreGVkO>-ev$F;b7Q93F`T zKcYkt6emmTuL8tgMLjRuzL)6QlD&O)h$l_$R<1ipv(6C1RiCF1o2rJ91!ZYQoYtYO zM>e8bSG;Sv!wF~X z*q6}Ff};{Q02>b^g8lI0=_1%AmCf?!wPl{qV%}B~w=)Kb_A_XXi;L8wc_Ahc{qTXY zBuBn0#3K*(v{CZGsHEu9&tDY|^zZ#rs@$?|v^&s{2YB|v&-yp*S06LAU6NEvOB}9d zf>8sPv4rRjtfUfye8D>JKTG2_Eq)H;mO@FG1%VyU9z$j5yj?+| zz?e;+7O=ua_QO`UxWGtB8n2JnUgfJ^E~zh+zXdIpgUi-55FmX_0g*yc3MI%_IbK%M z)Rev*F=Tbgs%)iGsQH9QgF>6eNT#Z47|SqLms>@$9V-EP6^U}_K1`y%d^*zk0qy}H z3*9-r=TRBf#%J~ET7XO4T4CmZW8utMgE9}o2j)O8^W#p$X!Nax<3$gC@uQ*bmj46H z#enOFr4cK^5MG?gGCvcO)jGV@hL0`v$4uM7-JfPjP(shPbsuUA&P2i4)(YU3hcW`w zu%AL9Y2jkz{ZHF3H~5i$l3w|tvkF1S#37D!N{G*o~5IGr^Y5l#HG>WO!Wd-#=2^bu23K7B2|YA&MIhXl=!)n^BP z*20#S9xXm(SI;heA6GngW-0;sY!-5ZF@|yodK{QvMUkbMD|+O-4_Pk7KhGeHsvC`| zlZ_*2yeT$V>C2Dc*>zH{DS`VnY+GbFGyla8WQK>cA8uuxl~5W;9GwfcwJ?y{%_`g` zZo3iCK`^CwVB9d{*e*nXlt>iKEZl)4f>uZK`6!* ziPAM8nUVffPiRU~1tRFy_oZaU?$K6Sv65KuH7&u;}+IDqgmO zI7x5lm#CK;&%@QvzKr-zEHW=MyLYWCv*ke9(Uq@)VI$Foko3cwx&XuFay%11IG?2P z&!&;@l@Z>xiqjyILXGd_gei>c^j5AR8S=e7F7*+{!Zu$t!T!vQ>ud=e>*f306Ea~O z;-R8$9!u_k&T=|5SAc5|KoUMuEo-E`8BFOs@+c|`w+kVwk{mT)9ja&H%~a|ANLJ!k zW#~Qk!Y!KXfPGO>tmVkg8w{SHu_oCPDstvtg%v`r?Y&NF+olpa1nq6u0P#jPQ{f)m zeu#judE+oPg%paa#U- zv_`c8Q6ZVck^H5Vt);jawQ;+$F$yq?6^HudM_`tqCFWm#OKp(Ps@rTepB6N1ZyNKQ8@i9#?=PZ z?6N4J^NqOd2TI=$4jPIOPTvB6SMNA);hCPXz^5K^r_dQqh+VmnYr;1;BlmH@juD{7y>WU3kRrr zA!_Hi6)_6+1KgyDDpnrp&;^pai7!1`L3@kHhs`0wdC98+@v-q?53b~;z29HcT&non4z1S%#g%LmZnDN1@IDdW{A+=}w8`~|^ zk#rOMi(|0sZ&ysE`ljNPNM#O`-zToE9ZvaNRx3#(r5Ss->Zuy8&{#kj@Tm;4O5J=i zm0}&z9N7Iiu6E$-E+Seheuz$rWOscOA*>=YL|59863|;kIw2E>rE(087Daj$eEc;_ zWcc!`u8aNJ!G4J8TM%xrcn+#3B_of%GIngW<#Q@3L1S?-7t{m%Bm2jgN9F zIqdj#`Fet-3@e|ENL%fM;9^bw+IT^fqB5sOCNWp1PG&$LJz7aWh0fMnWFbkB#rASm zQ91wU?0@0S-c;$${*nbc38`A61K(|9ncrHb#`!iGr;p9wD;|)Zur~si#GOFwpj3?W z74ocIsv-Z@?TokXmJua=jr8OVg9oFFA8Pe&jL&Ckzuqrlr+!XQ!2*4pB_QtT@*msii(+%9*zRG|&9W zMUX{k_?9$&=zGq%OHkLcaQu8WSoD_jvv@h1sr|z?X6ScRTIR=E3$I(3AYZYUkznVMxSo5OTl2FDC-ql4Lv{8l}^>n=4S z8)nBZ<@Bc+5ts=Cu({wQN#pGMYwE}yUW08rS1?cGR0NM`JTc4SLa5boW|=cHl-Ib| z-VGbf!=o^Pj_0F+_k|deJ}bPl&ONo8Xo2UwtkJRX{*zQR6#WprN#SF=27+$y)g25yW($QgzI15xSaMprrb1zZ=yD{~Vj7y=GP z9A5r7cWg?U!pE%VUL9IV#V8bt0WuMh_3D`7hVsQDU$r({a;_oHl6SPng3b%g=bq$n zbD4cIAJ?75pI0!#6KqLjMk(Y99ECN zxhb#mRS{3K8eB*gJ^9jWN~r;k+>H>Z-QP})%gCM#P1g&mE}B0QM1^9MJu!aSy*!`r z?w{bFY$BgXa&7)5h`I7HF)pBmXY*?tWDeF>p2_E-2z<&TGeW1wa-5H~5!k{j`~J_W zsZ4)s*v2xjD3R}mjr!h?M)`NcHgt!b_HzhMm+ViL+iNT zIWNosc$Pbyt7%AJ<5i8_sgA@j9P?>M7}TXh>WV~&HARFEmrfq?2-OR1$=yw152;UO zO*|%m@(2I=?Ud~3sH0XR!^WZ_#+2+f8{61$4(O8+PY8-FsN)Y`>ziYpa9fV87lKRD z;avkf?KBG?>`^e|JN`){`Q5=>Iy*gr-{ zjKGX{2%LV5fxp^tQqJ)WP4HZeF<&WguLU~rx_sj@$WVNu@*(Up8%PXQy&Vj-^p)=N zw1qKP@)A^ATQn8jBiC%|6|T)&I{-W~r-)Q03AqQCdbe@FPevi%F;@;#gXrw;zM z&ix(m_oDAFK+5+h`VRP8$@ly9pC#b$p#NDy`~?XD!oUIo@?QnT@8bU%sQ+CYiv8cj a{~5NG1R{T>U=*_^Iyz literal 0 HcmV?d00001 From 4c70f76d356f0753252e8d166a154bdba66e580c Mon Sep 17 00:00:00 2001 From: Syed Mohammad Ibrahim <8592115+iamibi@users.noreply.github.com> Date: Wed, 9 Mar 2022 11:41:17 -0500 Subject: [PATCH 2/3] Updated Readme --- README.md | 53 +---------------------------------------------------- 1 file changed, 1 insertion(+), 52 deletions(-) diff --git a/README.md b/README.md index 1903536..e4595c0 100644 --- a/README.md +++ b/README.md @@ -1,52 +1 @@ -# Projects -An outline of projects I have worked on. - -## [Secure Web Application](https://github.com/iamibi/Webgoat.NET) -*.NET Framework 4.7* -* Worked on attacking and defending the Webgoat.NET application -* Reported Common Weakness Enumeration (CWE) for all exploits performed as an attacker -* Secured the application for respective CWE's with best practices as a developer - -## Penetration Testing -*MySQL, Ubuntu 14.04, Windows 7 SP 1, Windows Server 2016, Wordpress Website* -* Performed penetration testing on various applications and operating systems -* Exploitation techniques involved, but not limited to, Cross-Site Scripting (XSS), SQL Injection, MS17_010 Eternal -Blue, Cowroot, Privilege Escalation, Buffer Overflow, etc. -* Used Open Source Intelligence (OSINT) for reconnaissance and identifying attack vectors -* Few of the tools involved in the process are NMap, Searchsploit, Metasploit, Hashcat, Burp Suite, etc. - -## [Employee Management System (EMS)](https://github.com/iamibi/EMS) -*ASP.NET Core, Microsoft Security Libraries, MongoDb* -* A portal for managing employees with primary focus on security details -* Areas covered in the project are Input Validation, Cryptography, Authentication & Authorization, Session Management, Error Handling, Logging and Debug - -## [Laughter Challenge](https://github.com/harshmandalgi/laugh-challenge) -*HTML, CSS, Bootstrap, Javascript* -* At hackathon named Game-Jam organized by Poshmark, we as a team created a Try Not to Laugh Challenge where the player will be presented with funny videos and will be tempted to laugh -* Created a webpage which renders a video section and a user camera section. -* A miniature machine learning library is used for identifying the player's smile and scoring them accordingly - -## [C-Sharp-Analyzer](https://github.com/iamibi/C-Sharp-Analyzer) -*C#* -* Different analyzers for static code analysis in C# - -## Chatbot -*Dialogflow, Crickinfo API, Slack Integration* -* A chatbot which uses dialogflow and crickinfo API to respond to questions asked around cricket -* The chatbot was integrated with slack so that it is easier to ask questions -* Part of hackathon with a team of 6 people - -## [Blowfish Cipher](https://github.com/iamibi/Blowfish-Cipher) -*Python* -* Minor project on analysis and implementation of blowfish cipher for password encryption -* A terminal based program that accepts a password as input and saves it as a cipher text in a file - -## [RSA Cryptographic Algorithm](https://github.com/iamibi/RSA-Cryptographic-Algorithm) -*Python* -* RSA Algorithm for message encryption using block cipher -* Accepts a plain text message via terminal or file as input and outputs an encrypted message -# -# Open Source Contributions -* [oauth-ruby](https://github.com/oauth-xx/oauth-ruby) - A Ruby library which implements OAuth 1.0 -* [TemPy](https://github.com/Hrabal/TemPy) - Fast Object-Oriented HTML templating With Python -* [C-Guide-for-Beginners](https://github.com/OpenGuide/C-Guide-for-Beginners) - A guide for beginners in C language +Secure Code Review on Open-Source Project [Sonarr](https://github.com/Sonarr/Sonarr/tree/81ff4791acd49e7f557785a41506f75273a657ae) and wrote the report on Common Weakness Enumeration's (CWE's) found. The Report outlines all the tools used in compliment with the manual code review process. From fd2f53878cf12243778a42301e36340355a47204 Mon Sep 17 00:00:00 2001 From: Syed Mohammad Ibrahim <8592115+iamibi@users.noreply.github.com> Date: Wed, 9 Mar 2022 11:46:59 -0500 Subject: [PATCH 3/3] Updated Readme --- README.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index e4595c0..82b3b15 100644 --- a/README.md +++ b/README.md @@ -1 +1,5 @@ -Secure Code Review on Open-Source Project [Sonarr](https://github.com/Sonarr/Sonarr/tree/81ff4791acd49e7f557785a41506f75273a657ae) and wrote the report on Common Weakness Enumeration's (CWE's) found. The Report outlines all the tools used in compliment with the manual code review process. +- Performed Secure Code Review on Open-Source Project [Sonarr](https://github.com/Sonarr/Sonarr/tree/81ff4791acd49e7f557785a41506f75273a657ae) +- Wrote a report on the Common Weakness Enumeration's (CWE's) found during the review +- Involved manual code review +- Project was cloned and built locally +- The Report outlines all the tools used in complement with the manual code review process.