new rule to detect the usage of rand() function

htrgouvea · Jan 4, 2025 · f1225f7 · f1225f7
1 parent 64b471b
commit f1225f7
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/rules/default.yml b/rules/default.yml
@@ -26,4 +26,10 @@ rules:
     name: Weak Criptography Algorithm
     message: Weak algorithms like MD5 are susceptible to various attacks and should be avoided in favor of stronger alternatives to ensure the security of sensitive data.
     sample:
-      - md5
+      - md5
+  - id: '0005'
+    category: vuln
+    name: Weak Random Value Generator
+    message: Weak random value generators can lead to predictable values, which can be exploited by attackers to bypass security controls.
+    sample:
+      - rand