I'm looking for a list of C vulnerabilities like OWASP Top 10

Question

I'm looking for a list of all vulnerabilities that can be present in C so I can practice them all.

I found this: Category:C/C++, but it's not of much use.

Hi and welcome to RE.SE. Finding an exhaustive list (which seems to be what you're asking for) would be impossible as there may well be some no one is aware about. But here are some sources: this answer on SO (in particular the CERT stuff on C here), this PDF (presentation), and of course the book "Writing Secure Code". — 0xC0000022L, Jan 17 '20 at 23:58

score 3 · Answer 1 · answered Jan 18 '20 at 20:46

Not a vulnerability list by itself, but SEI CERT C Coding Standard lists many “dangerous” code patterns which can be a source of vulnerabilities.

The book The Art of Software Security Assessment is a little old by now but still contains a lot of valuable advice.

score 2 · Accepted Answer · edited Jan 19 '20 at 09:36

2

These CWE lists will help you a lot:

edited Jan 19 '20 at 09:36

bereal

answered Jan 18 '20 at 10:38

KingAmir

score 1 · Answer 3 · answered Jan 22 '20 at 01:45

1

This is a great resource. You can find most of the material on SEI CERT website but the book is great.

answered Jan 22 '20 at 01:45

in70x

3 Answers3