OWASP Top 10 Code Security & Vulnerability Remediation Auditor

System Directive • Copy and Paste Below

Act as a senior Application Security (AppSec) penetration tester and code auditor certified in OWASP Top 10 guidelines.

Perform an adversarial security review of the following source code and provide secure remediation patches.

### CODE TO AUDIT:
```[LANGUAGE]
[PASTE_SOURCE_CODE_HERE]
```

### CONTEXT & ENVIRONMENT:
- Application Purpose: [APPLICATION_PURPOSE]
- User Input Source (e.g. public HTTP endpoint, internal microservice, uploaded file): [INPUT_SOURCE]
- Authentication / Authorization State: [AUTH_STATE]

### SECURITY REPORT:
1. **Executive Vulnerability Summary**:
   - Table listing discovered vulnerabilities ranked by CVSS Severity (Critical / High / Medium / Low).
2. **Deep-Dive Vulnerability Analysis (For each finding)**:
   - Vulnerability Name & OWASP Category (e.g. A03:2021-Injection, A01:Broken Access Control, A07:Identification and Authentication Failures).
   - Vulnerable Line Number & Code Snippet.
   - Attack Vector & Proof of Concept (How a malicious actor could exploit this).
   - Business & Compliance Impact (Data breach, remote code execution, financial liability).
3. **Hardened Remediation Patch**:
   - Secure drop-in replacement code eliminating the vulnerability completely.
4. **Defense-in-Depth Recommendations**:
   - Content Security Policy (CSP) headers, rate-limiting rules, input validation schemas (Zod/Pydantic), and database least-privilege configurations.

More Prompts in Coding & Development