FedSearch - Federated network search engine

aegilops :github::microsoft: · @aegilops

126 followers · 470 posts · Server fosstodon.org

I open sourced a tool to create lists of repos to run GitHub CodeQL’s Multi-Repository Variant Analysis on, using a keyword search on GitHub.

It's a Bash script you can trigger with a VSCode build task. It uses the GitHub API (via the GitHub CLI) to fill a list in the VSCode settings.

It’s a stopgap before this sort of feature makes it into the product.

https://github.com/advanced-security/mrva-code-search

#MRVA #VariantAnalysis #CodeQL #GitHub #VSCode #BuildTask #SAST #VulnerabilityResearch

#mrva #variantanalysis #CodeQL #github #vscode #buildtask #sast #vulnerabilityresearch

Last updated 2 years ago

Original post

aegilops :github::microsoft: · @aegilops

118 followers · 432 posts · Server fosstodon.org

The GitHub Blog - Multi-repository variant analysis: a powerful new way to perform security research across GitHub | The GitHub Blog

You can now run a single static analysis query across thousands of repos on GitHub using CodeQL's MRVA (Multi-repo Variant Analysis).

That's great both for security research and rapidly auditing exposure to a single vuln or weakness for security teams.

It works from the CodeQL extension for VSCode, with open source public repos & private repos where CodeQL Code Scanning is enabled.

https://github.blog/2023-03-09-multi-repository-variant-analysis-a-powerful-new-way-to-perform-security-research-across-github/

#GitHub #SecurityResearch #VulnerabilityResearch #CodeQL #VariantAnalysis #MRVA #SAST

#github #securityresearch #vulnerabilityresearch #CodeQL #variantanalysis #mrva #sast

Last updated 2 years ago

Original post

TODO Courses · @TODO

0 followers · 1 posts · Server infosec.exchange

TODO: Courses and Training - Learn Revere Engineering, Vulnerability Research, and Offensive Security - TODO: Courses and Training - Home 🧑‍💻

We've just setup shop on Mastodon! 🐘The TODO training platform's still in early development, however, if you're looking to learn #ReverseEngineering, #VulnerabilityResearch, and #OffensiveSecurity then you've come to your right place. 👨‍💻👩‍💻🧑‍💻

https://www.ReverseEngineering.courses

#reverseengineering #vulnerabilityresearch #offensivesecurity

Last updated 2 years ago

Original post

JamesStevenson · @JamesStevenson

42 followers · 6 posts · Server infosec.exchange

I've been working on a #ReverseEngineering, #VulnerabilityResearch , #PenTesting, and #OffensiveSecurity training platform over the past few months. It's still in the 'MVP' stage so I'd love any feedback folk have for it! 🧑‍💻👩‍💻👨‍💻

http://www.TODO.courses

#reverseengineering #vulnerabilityresearch #pentesting #offensivesecurity

Last updated 2 years ago

Original post

JamesStevenson · @JamesStevenson

202 followers · 7 posts · Server infosec.exchange

TODO: Courses and Training - Learn Revere Engineering, Vulnerability Research, and Offensive Security - TODO: Courses and Training - Home 🧑‍💻

I've been working on a #ReverseEngineering, #VulnerabilityResearch , #PenTesting, and #OffensiveSecurity training platform over the past few months. It's still in the 'MVP' stage so I'd love any feedback folk have for it! 🧑‍💻👩‍💻👨‍💻

http://www.TODO.courses

#reverseengineering #vulnerabilityresearch #pentesting #offensivesecurity

Last updated 2 years ago

Original post

JamesStevenson · @JamesStevenson

202 followers · 7 posts · Server infosec.exchange

Open media

I've finally setup an account on Mastodon 🙌😅 Now that I'm here, thought that I'd fill my feed with a few bits and pieces that I've been up to over the past year. 🧵

📱100% off #Android #Malware Analysis Course:
https://www.udemy.com/course/android-malware-analysis/?couponCode=MASTODON

🤖 100% off Android Games #ReverseEngineering Course:
https://www.udemy.com/course/learn-reverse-engineering-through-android-games/?couponCode=MASTODON

📚 75% Off My Android / #iOS #VulnerabilityResearch and #PenTesting book: https://ko-fi.com/jamesstevenson/link/MASTODON

#android #malware #reverseengineering #ios #vulnerabilityresearch #pentesting

Last updated 2 years ago

Original post

anne-marie creamer · @amcreamer

161 followers · 62 posts · Server zirk.us

I should have hash tagged this 👆- #vulnerability #vulnerabilityresearch #CSM #illness #interdependence #woundedstoryteller #havicarel

#havicarel #woundedstoryteller #interdependence #illness #CSM #vulnerabilityresearch #vulnerability

Last updated 2 years ago

Original post

Tinker ☀️ · @tinker

8184 followers · 4740 posts · Server infosec.exchange

Mastodon hosted on cybervillains.com - The Lair of the CyberVillains

To this! It's looks like @alex has set up a Mastodon instance that can be messed around with as a sort of lab environment (is that right, Alex?!) - Perhaps a valid target for web app pentesting and bug research for Mastodon?

(HT @JoshCGrossman for the tip!)

Talk to @alex to be sure and for more information.

But here's the link to the server:
https://cybervillains.com/explore

_____
#WebAppPentesting #VulnerabilityResearch #Mastodon

#WebAppPentesting #vulnerabilityresearch #mastodon

Last updated 2 years ago

Original post

Tinker ☀️ · @tinker

8184 followers · 4740 posts · Server infosec.exchange

GitHub - Build software better, together

So @jerry has brought together all these hackers, all these information security professionals, all these web application penetration testers...

...and put them together on an open sourced web application.

Look, I ain't telling you to hack this specific server. But I am telling you to have fun with the software (IN YOUR OWN LAB ENVIRONMENT!!!)

Anyhoo... information on how to report vulnerabilities within Mastodon here: https://github.com/mastodon/mastodon/security/policy

_______
#WebAppPentesting #infosec #FOSS #VulnerabilityResearch

#WebAppPentesting #infosec #foss #vulnerabilityresearch

Last updated 2 years ago

Original post

weetster · @weetster

169 followers · 74 posts · Server ioc.exchange

It’s crazy to me how often I find some vulnerable code in a library but it’s unreachable for whatever reason. Maybe it becomes reachable one day or maybe it sits there forever, just out of reach, because either way it’s not worth anyone’s time to report or fix. #infosec #vulnerabilityresearch

#infosec #vulnerabilityresearch

Last updated 2 years ago

Original post