CodeQL zero to hero part 2: getting started with CodeQL
Check it out! ๐
https://github.blog/2023-06-15-codeql-zero-to-hero-part-2-getting-started-with-codeql/
#StaticAnalysis #SecurityResearch #GithubSecurityLab #Codeql #Security
#staticanalysis #securityresearch #githubsecuritylab #codeql #security
Swift support brings broader mobile application security to GitHub Advanced Security
Check it out! ๐
https://github.blog/2023-06-06-swift-support-brings-broader-mobile-application-security-to-github-advanced-security/
#Sast #MobileApplicationSecurity #GithubAdvancedSecurity #Codeql #CodeScanning #Security
#sast #mobileapplicationsecurity #githubadvancedsecurity #codeql #codescanning #security
Manage your application security stack effectively with the tool status page
Check it out! ๐
https://github.blog/2023-05-04-manage-your-application-security-stack-effectively-with-the-tool-status-page/
#Sast #GithubAdvancedSecurity #Codeql #CodeScanning #Security
#sast #githubadvancedsecurity #codeql #codescanning #security
Multi-repository enablement: effortlessly scale code scanning across your repositories
Check it out! ๐
https://github.blog/2023-04-17-multi-repository-enablement-effortlessly-scale-code-scanning-across-your-repositories/
#securityoverview #sast #codeql #codescanning #security
CodeQL zero to hero part 1: the fundamentals of static analysis for vulnerability research
Check it out! ๐
https://github.blog/2023-03-31-codeql-zero-to-hero-part-1-the-fundamentals-of-static-analysis-for-vulnerability-research/
#StaticAnalysis #SecurityResearch #GithubSecurityLab #Codeql #Security
#staticanalysis #securityresearch #githubsecuritylab #codeql #security
Improvements to CodeQLโs data flow library for C++
Check it out! ๐
https://github.blog/2023-03-30-improvements-to-codeqls-data-flow-library-for-c/
lovely evening with the guys at #turin's #meethack, tinkering with #codeql, talking about security research and having pretty great pizza. if you happen to be around town, check it out! (content is in Italian) https://www.meetup.com/meethack/events/291641038/
As a former Red Teamer who is also now finally trying to get into CodeQL for audits, this video from @LiveOverflow was hilarious and amazing.
https://www.youtube.com/watch?v=VrF1RwnJzBk
#infosec #redteam #codeql
For the folks using https://github.com/anticomputer/emacs-codeql โฆ if youโve been having AST viewer issues using the latest codeql libraries and cli versions (2.12.0), I just landed support for the new query-server2 which these versions require. I also overhauled the core search path handling to be more aligned to modern codeql pack and workspace based query development and as a result the documentation and configuration requirements have been much simplified #emacs #codeql
I was at my desk to fix some small emacs-codeql bugs and ended up recording a little demo while I was up there: https://www.youtube.com/watch?v=WOx91sAnwoA #emacs #CodeQL
Super stoked that tree-sitter is merged into #emacs main now. It made implementing a #CodeQL highlight mode for https://github.com/anticomputer/emacs-codeql an absolute breeze, as opposed to the traditional regex based headache.
Look out! Divergent representations are everywhere! - By Andreas Kellas
Trail of Bits recently published a blog post about a signed inte... https://blog.trailofbits.com/2022/11/10/divergent-representations-variable-overflows-c-compiler/ #internshipprojects #researchpractice #uncategorized #binaryninja #codeql
#codeql #binaryninja #uncategorized #researchpractice #internshipprojects
Finding unhandled errors using CodeQL - By Fredrik Dahlgren
One of your developers finds a bug in your codebaseโan unhandled erro... https://blog.trailofbits.com/2022/01/11/finding-unhandled-errors-using-codeql/ #codeql
Detecting Iterator Invalidation with CodeQL - by Kevin Higgs, Montgomery Blair High School
Iterator invalidation is a common and subtle class of C... https://blog.trailofbits.com/2020/10/09/detecting-iterator-invalidation-with-codeql/ #internshipprojects #staticanalysis #codeql
#codeql #staticanalysis #internshipprojects