Weakness discovery
For each entry point, searches for the weakness classes that apply to it: injection, broken access control, SSRF, deserialization, path traversal.
Sub-techniques
2
| ID | Name | Description |
|---|---|---|
V1060.001 | Per-surface weakness search | Apply the weakness classes relevant to each surface category. |
V1060.002 | Multi-tenancy isolation | Check every query and cache key for tenant scoping. |
Craft it
- Map each surface category to the weakness classes that apply.
- Search with taint queries and an investigating agent.
- Record each weakness with the entry point it is reachable from.
Reverse engineer it
Signs that a codebase already runs this technique, and where to read how it is configured.
- Security audit reports or issues labelled security.
Open-source packages
3
- Joern joernio/joern
- Vulnhuntr protectai/vulnhuntr
- Semgrep CE semgrep/semgrep