Manual code review

IDE

During searching for vulnerabilities we need an IDE. You can use any application you want but in this we work with Visual Studio Code.

Helpful Visual Studio Code functionalities

Good IDE comes with a lot of useful features. This is the case with Visual Studio code. In the sections below you can find one of the best capabilities of VSC when it comes to source code review.

Find All References

First interesting feature of VSC is possibility of finding all references of function in whole project.

Search in all files

With Ctrl / Command + Shift + F combination you can turn on global search which will find provided word in all files of the opened projects. Despite providing a lot of useless information sometimes it can help in identifying interesting pieces of code in the application.

Regular expressions

Regular expressions are very useful when it comes to digging through the code. It is important to understand them in order to be efficent during code review.