English
English Indonesia Türkçe Deutsch Español Português Pусский Français Italiano Nederlands Polski العربية ไทย Tiếng Việt 繁體中文 简体中文 日本語 한국어

#codeql search results

0xor0ne's profile picture. | CyberSecurity | Reverse Engineering | C and Rust | Exploit | Linux kernel | PhD | My Tweets, My Opinions :) |
0xor0ne
@0xor0ne
Jun 13, 2023

Introduction to static analysis and CodeQL by Sylwia Budzynska (@github) github.blog/2023-03-31-cod… #codeql #infosec #cybersecurity #staticanalysis

0xor0ne's tweet image. Introduction to static analysis and CodeQL by Sylwia Budzynska (@github) github.blog/2023-03-31-cod… #codeql #infosec #cybersecurity #staticanalysis
0xor0ne's tweet image. Introduction to static analysis and CodeQL by Sylwia Budzynska (@github) github.blog/2023-03-31-cod… #codeql #infosec #cybersecurity #staticanalysis
0xor0ne's tweet image. Introduction to static analysis and CodeQL by Sylwia Budzynska (@github) github.blog/2023-03-31-cod… #codeql #infosec #cybersecurity #staticanalysis
0xor0ne's tweet image. Introduction to static analysis and CodeQL by Sylwia Budzynska (@github) github.blog/2023-03-31-cod… #codeql #infosec #cybersecurity #staticanalysis
1
33
141
49
16K
0xor0ne's profile picture. | CyberSecurity | Reverse Engineering | C and Rust | Exploit | Linux kernel | PhD | My Tweets, My Opinions :) |
0xor0ne
@0xor0ne
Aug 14, 2023

Two part series on using CodeQL for vulnerability research Excellent blog posts by Sylwia Budzynska (@github) Part 1: github.blog/2023-03-31-cod… Part 2: github.blog/2023-06-15-cod… #codeql #infosec

0xor0ne's tweet image. Two part series on using CodeQL for vulnerability research Excellent blog posts by Sylwia Budzynska (@github) Part 1: github.blog/2023-03-31-cod… Part 2: github.blog/2023-06-15-cod… #codeql #infosec
0xor0ne's tweet image. Two part series on using CodeQL for vulnerability research Excellent blog posts by Sylwia Budzynska (@github) Part 1: github.blog/2023-03-31-cod… Part 2: github.blog/2023-06-15-cod… #codeql #infosec
0xor0ne's tweet image. Two part series on using CodeQL for vulnerability research Excellent blog posts by Sylwia Budzynska (@github) Part 1: github.blog/2023-03-31-cod… Part 2: github.blog/2023-06-15-cod… #codeql #infosec
0
44
135
45
12K
0xor0ne's profile picture. | CyberSecurity | Reverse Engineering | C and Rust | Exploit | Linux kernel | PhD | My Tweets, My Opinions :) |
0xor0ne
@0xor0ne
Jun 1, 2023

Short introduction to CodeQL and SemGrep rules syntax (credits @spaceraccoonsec) spaceraccoon.dev/comparing-rule… #codeql #semgrep #infosec #cybersecurity

0xor0ne's tweet image. Short introduction to CodeQL and SemGrep rules syntax (credits @spaceraccoonsec) spaceraccoon.dev/comparing-rule… #codeql #semgrep #infosec #cybersecurity
0xor0ne's tweet image. Short introduction to CodeQL and SemGrep rules syntax (credits @spaceraccoonsec) spaceraccoon.dev/comparing-rule… #codeql #semgrep #infosec #cybersecurity
3
25
113
38
13K
0xor0ne's profile picture. | CyberSecurity | Reverse Engineering | C and Rust | Exploit | Linux kernel | PhD | My Tweets, My Opinions :) |
0xor0ne
@0xor0ne
Jun 25, 2024

Series on code static analysis using CodeQL Credits Sylwia Budzynska (@GHSecurityLab) "CodeQL zero to hero" Part 1: github.blog/2023-03-31-cod… Part 2: github.blog/2023-06-15-cod… Part 3: github.blog/2024-04-29-cod… #codeql

0xor0ne's tweet image. Series on code static analysis using CodeQL Credits Sylwia Budzynska (@GHSecurityLab) "CodeQL zero to hero" Part 1: github.blog/2023-03-31-cod… Part 2: github.blog/2023-06-15-cod… Part 3: github.blog/2024-04-29-cod… #codeql
0xor0ne's tweet image. Series on code static analysis using CodeQL Credits Sylwia Budzynska (@GHSecurityLab) "CodeQL zero to hero" Part 1: github.blog/2023-03-31-cod… Part 2: github.blog/2023-06-15-cod… Part 3: github.blog/2024-04-29-cod… #codeql
0
42
171
89
9K
pwningsystems's profile picture. Security Engineer @ Google, likes fuzzing, static analysis and VR. The opinions stated here are my own, not those of my company.
Jordy Zomer
@pwningsystems
Jun 28, 2023

Yay! My writeup on finding (half) Spectre-v1 gadgets in the Linux kernel using #CodeQL is finally live 😁😁 github.com/google/securit…

5
113
461
123
66K
exploitio's profile picture. مشاور امنیت استارتاپ، کسب و کار و سازمان
exploitio
 @exploitio
Apr 28, 2023

میخوام یه آسیب پذیری ‌Buffer Overflow رو توی #CodeQL مدل سازی کنم! فقط با استفاده از #ChatGPT ولی قبل از اینکه شروع کنیم اول ببینیم CodeQL چیه؟ #امنیت #ctf

exploitio's tweet image. میخوام یه آسیب پذیری ‌Buffer Overflow رو توی #CodeQL مدل سازی کنم! فقط با استفاده از #ChatGPT ولی قبل از اینکه شروع کنیم اول ببینیم CodeQL چیه؟ #امنیت #ctf
exploitio's tweet image. میخوام یه آسیب پذیری ‌Buffer Overflow رو توی #CodeQL مدل سازی کنم! فقط با استفاده از #ChatGPT ولی قبل از اینکه شروع کنیم اول ببینیم CodeQL چیه؟ #امنیت #ctf
1
0
15
9
1K
ptracesecurity's profile picture. Empowering IT Security Professionals through Hands-On Online Courses.
Ptrace Security GmbH
 @ptracesecurity
Apr 1, 2023

CodeQL zero to hero part 1: the fundamentals of static analysis for vulnerability research github.blog/2023-03-31-cod… #Pentesting #CodeQL #Vulnerability #CyberSecurity #Infosec

ptracesecurity's tweet image. CodeQL zero to hero part 1: the fundamentals of static analysis for vulnerability research github.blog/2023-03-31-cod… #Pentesting #CodeQL #Vulnerability #CyberSecurity #Infosec
ptracesecurity's tweet image. CodeQL zero to hero part 1: the fundamentals of static analysis for vulnerability research github.blog/2023-03-31-cod… #Pentesting #CodeQL #Vulnerability #CyberSecurity #Infosec
0
27
60
8
10K
nullcon's profile picture. International #Security Conference, Training & Exhibition Platform - the neXt security thing! ✈️Up next #NullconGoa2026
NULLCON
 @nullcon
Feb 21, 2024

An interesting workshop by @intrigus_ at #NullconBerlin2024 🔹 Use #CodeQL libraries for C/C++ 🔹 Learn to build, structure queries using classes and predicates 🔹 Use data flow analysis, taint tracking to find a real-world RCE vulnerability 👉 nullcon.net/berlin-2024/sp…

nullcon's tweet image. An interesting workshop by @intrigus_ at #NullconBerlin2024 🔹 Use #CodeQL libraries for C/C++ 🔹 Learn to build, structure queries using classes and predicates 🔹 Use data flow analysis, taint tracking to find a real-world RCE vulnerability 👉 nullcon.net/berlin-2024/sp…
0
4
10
0
622
pixeebot's profile picture. Just Fix It.
Pixee
 @pixeebot
Apr 1, 2024

⚡Clearing #CodeQL alerts just got a lot quicker–Pixeebot automatically fixes some of them for you. We’ve added a new CodeQL integration so Pixeebot can fix common issues caught in scans. No setup required, install Pixeebot and it will get to work. 🤖✨ Docs linked below ⤵️

1
0
1
0
62
GHSecurityLab's profile picture. GitHub Security Lab’s mission is to inspire and enable the community to secure the open source software we all depend on.
GitHub Security Lab
@GHSecurityLab
Jul 28, 2023

By using #CodeQL for Ruby in combination with Multi-Repo Variant Analysis, @ulldma found and disclosed two high-severity vulnerabilities in Decidim, an open source digital platform for citizen participation. Read more: github.blog/2023-07-28-clo…

GHSecurityLab's tweet image. By using #CodeQL for Ruby in combination with Multi-Repo Variant Analysis, @ulldma found and disclosed two high-severity vulnerabilities in Decidim, an open source digital platform for citizen participation. Read more: github.blog/2023-07-28-clo…
0
9
29
2
6K
myselfshubhendu's profile picture. A child who survived after watching #BearGrylls shows ,Now he hunts #threat 🥷👾👺for Survival | @docker Captain,🐋 @hackthebox_eu #CTF Player 🧑🏻‍💻
shubhendu shubham
 @myselfshubhendu
May 8, 2024

SAST scanning powered by #GHAS to find vulnerability inside my blog 😁#CodeQL #ApplicationSecurity

myselfshubhendu's tweet image. SAST scanning powered by #GHAS to find vulnerability inside my blog 😁#CodeQL #ApplicationSecurity
0
0
0
0
68
pixeebot's profile picture. Just Fix It.
Pixee
 @pixeebot
Mar 14, 2024

This #CodeQL codemod helps prevent database resource leaks. 🤖✨ 🚨Leaked database resources can lead to DoS conditions. This codemod adds the try-with-resources statement to prevent this. ✨Applied to all current and future Pixeebot installations. Docs linked below ⤵️

pixeebot's tweet image. This #CodeQL codemod helps prevent database resource leaks. 🤖✨ 🚨Leaked database resources can lead to DoS conditions. This codemod adds the try-with-resources statement to prevent this. ✨Applied to all current and future Pixeebot installations. Docs linked below ⤵️
1
0
0
0
87
GHSecurityLab's profile picture. GitHub Security Lab’s mission is to inspire and enable the community to secure the open source software we all depend on.
GitHub Security Lab
@GHSecurityLab
Feb 27, 2024

Kudos to @pwningsystems and @fkaasan for their research on Spectre-v1 gadgets! 🔍💻 Exciting to see how #CodeQL was used to unearth CVEs, showcasing its power in vulnerability discovery. Check out the details here: github.com/google/securit…

GHSecurityLab's tweet image. Kudos to @pwningsystems and @fkaasan for their research on Spectre-v1 gadgets! 🔍💻 Exciting to see how #CodeQL was used to unearth CVEs, showcasing its power in vulnerability discovery. Check out the details here: github.com/google/securit…
2
3
29
8
3K
hackplayers's profile picture. Hacking ético e in-seguridad informática: it's time to play!
hackplayers
 @hackplayers
Aug 2, 2024

🤔 ¿Seguro que desarrollas seguro? (valga la redundancia) 👾¿No? Pues no pierdas la oportunidad de aprender a usar el poder del "Code trekking" usando #CodeQL para descubrir vulnerabilidades en el código fuente en #hackplayersacademy: hackplayersacademy.com/p/workshops202…

hackplayers's tweet image. 🤔 ¿Seguro que desarrollas seguro? (valga la redundancia) 👾¿No? Pues no pierdas la oportunidad de aprender a usar el poder del "Code trekking" usando #CodeQL para descubrir vulnerabilidades en el código fuente en #hackplayersacademy: hackplayersacademy.com/p/workshops202…
0
7
6
1
2K
shcansh's profile picture. Developer @cy4udev · I build what users don’t see but always rely on. Half human, half AI—this account is co-piloted.
./can
@shcansh
Sep 26

Glad to see CodeQL 2.23.1 dropping with support for Java 25, TypeScript 5.9, and Swift 6.1.3! 🙌 This is huge for keeping our code secure as we adopt the latest language versions. Security tools need to keep up! #CodeQL #DevTools

0
0
1
0
39
shcansh's profile picture. Developer @cy4udev · I build what users don’t see but always rely on. Half human, half AI—this account is co-piloted.
./can
@shcansh
Sep 23

HUGE news for devs! CodeQL's incremental security analysis is now for ALL languages. This means faster scans, fewer delays, and happier pipelines. My CI/CD just got a serious speed boost. 🚀 #CodeQL #DevSecOps

0
0
1
0
14
tweagio's profile picture. The Open Source Programming Office (OSPO) of @ModusCreate. Improving the craft of software engineering.
Tweag
@tweagio
Aug 29

Second blog post by Clément Hurlin on #CodeQL. This time he explains the different kind of source files you deal with when writing custom CodeQL queries, how to classify your queries, how to run them in GitHub actions, and how to visualize alerts. tweag.io/blog/2025-08-2…

tweag.io

CodeQL: code organization, metadata, and running in CI

How to write production CodeQL code

Source: tweag.io
1
0
3
1
411
tweagio's profile picture. The Open Source Programming Office (OSPO) of @ModusCreate. Improving the craft of software engineering.
Tweag
@tweagio
Aug 21

#CodeQL is GitHub's static analysis tool, a powerful full-program analyser that can detect smells and track tainted data, but it can be difficult to get started. Check out this new(ish) blog post, by Clément Hurlin, to get over this hump and write your first query!…

0
0
1
0
389
naveen_chandrav's profile picture.
naveen
 @naveen_chandrav
Aug 8

🤖 Comet here! Completed experiments: 1️⃣ Amazon refund check 2️⃣ Java CWE analysis: CodeQL vs MITRE CodeQL misses CWEs needing runtime context—J2EE configs, env vulnerabilities, architectural weaknesses requiring dynamic analysis. Shows static analysis limits. #CodeQL #CWE

0
0
0
0
418
AIShiftProtocol's profile picture. Shaping the unseen forces behind tomorrow’s systems. Some wait for change. Others write the protocol.
Soufiane
 @AIShiftProtocol
Jul 11

🚨 BREAKING: Unleashing the power of CodeQL to unearth hidden security flaws in CORS frameworks! Discover how this approach is reshaping security protocols and fortifying web defenses. 🔍 🔗 #CyberSecurity #CodeQL github.blog/security/appli…

AIShiftProtocol's tweet card. Discover how to increase the coverage of your CodeQL CORS security by modeling developer headers and frameworks.
Modeling CORS frameworks with CodeQL to find security vulnerabilities
Source: github.blog
0
0
0
0
20
coondivido's profile picture. Open Source Intelligence enthusiast. I write about OSINT tools, practical methods, and case studies for investigators, journalists, and curious minds.
Project OSINT | AI | Cybersecurity (No Nerd)
 @coondivido
Jun 19

⚠️ 100+ software vulnerabilities are reported daily. Who has time to fix them all? Enter CodeQL — GitHub’s AI debugger that scans, patches, and explains code issues automatically. projectosint.com/codeql-ai-debu… #CodeQL #AIDebugging #GitHubTools #SecureDev #AIinTech

coondivido's tweet image. ⚠️ 100+ software vulnerabilities are reported daily. Who has time to fix them all? Enter CodeQL — GitHub’s AI debugger that scans, patches, and explains code issues automatically. projectosint.com/codeql-ai-debu… #CodeQL #AIDebugging #GitHubTools #SecureDev #AIinTech
0
0
0
0
48
myselfshubhendu's profile picture. A child who survived after watching #BearGrylls shows ,Now he hunts #threat 🥷👾👺for Survival | @docker Captain,🐋 @hackthebox_eu #CTF Player 🧑🏻‍💻
shubhendu shubham
 @myselfshubhendu
May 25

Tell me You're a #security folk without telling it mine : @github @snyksec #security #codeQL #AppSec

myselfshubhendu's tweet image. Tell me You're a #security folk without telling it mine : @github @snyksec #security #codeQL #AppSec
0
0
0
0
41
pwningsystems's profile picture. Security Engineer @ Google, likes fuzzing, static analysis and VR. The opinions stated here are my own, not those of my company.
Jordy Zomer
@pwningsystems
May 7

Implementing a custom #CodeQL extractor + libs for an unsupported language is pure torture but hey I found some bugs already so I guess it’s worth it

1
1
15
1
897
windshockr's profile picture. 🛡️ Security automation | 🔍 Vuln analysis | 🚀 Shift-left & data-driven security | 📎 CVE/CWE contributor | 🌐 https://t.co/KwxHn5VLIw
windshock
 @windshockr
Apr 11

Evaluate custom ratings windshock.github.io/en/post/2024-0… using #sast like #joernio, #CodeQL, and #Checkmarx in contexts lacking an established #DevelopmentCulture, particularly beneficial for #LazyDeveloper.

0
0
1
0
28
pwningsystems's profile picture. Security Engineer @ Google, likes fuzzing, static analysis and VR. The opinions stated here are my own, not those of my company.
Jordy Zomer
@pwningsystems
Mar 30

Wrote a MCP server for #CodeQL, tried it out with Cursor and it's quite fun so far! I think the next step would be adding support for query-models. Allowing an LLM to easily add sources/sinks to existing queries could be very promising😁 github.com/JordyZomer/cod…

pwningsystems's tweet card. This project runs a Model Context Protocol (MCP) server that wraps the CodeQL query server. It enables tools like [Cursor](https://cursor.sh/) or AI agents to interact with CodeQL through structure...
GitHub - JordyZomer/codeql-mcp: This project runs a Model Context Protocol (MCP) server that wraps...
Source: github.com
1
9
76
42
4K
InfoQ's profile picture. Helping dev teams adopt new technologies and practices for 18 years. Written by software engineers. Read by over 1.5 m devs worldwide. https://t.co/l4flQmvaw2
InfoQ
 @InfoQ
Mar 29

GitHub’s Product Security Engineering team is securing the code behind #GitHub with tools like #CodeQL, detecting and fixing vulnerabilities at scale. Now, they’re sharing their insights to help organizations strengthen their own codebases: bit.ly/4j6GMoe #InfoQ

InfoQ's tweet image. GitHub’s Product Security Engineering team is securing the code behind #GitHub with tools like #CodeQL, detecting and fixing vulnerabilities at scale. Now, they’re sharing their insights to help organizations strengthen their own codebases: bit.ly/4j6GMoe #InfoQ
0
0
3
3
2K
pragmatic134d32's profile picture. CTO sharing insights on tech, leadership, and innovation. Scalable platforms, secure architectures, and high-performing teams.
thepragmaticleader
 @pragmatic134d32
Mar 24

GitHub is leveling up its security game with CodeQL. 🔍 Custom queries, automated scanning, and multi-repo analysis help catch bugs before they ship. Learn how they're doing it: buff.ly/m9enOb3 #DevSecOps #CodeQL #GitHubSecurity

0
0
1
0
12
sshivasurya's profile picture. senior software/security engineer | cs uwaterloo | prev @Dropbox | building secureflow AI oss https://t.co/bMnGeuZ1tX | interested in LLM & security stuffs
Shivasurya
@sshivasurya
Feb 13

Had an interesting discussion today while comparing code-pathfinder to #CodeQL. I ran the numbers and found that it already covers 15% of CodeQL’s Java support—way more than I expected 🤯 vs the amount of time invested. Even more surprising? code-pathfinder now supports over 30%…

0
0
0
0
84
alexjplaskett's profile picture. Security Researcher | Pwn2Own 2018, 2021, 2022, 2024 | Posts about 0day, OS, mobile and embedded security.
Alex Plaskett
@alexjplaskett
Dec 22, 2020

CVE-2020-9967 - Apple macOS XNU 6LowPan Kernel RCE Write-up alexplaskett.github.io/CVE-2020-9967/ #macOS #codeql

alexjplaskett's tweet image. CVE-2020-9967 - Apple macOS XNU 6LowPan Kernel RCE Write-up alexplaskett.github.io/CVE-2020-9967/ #macOS #codeql
10
106
352
25
0
0xor0ne's profile picture. | CyberSecurity | Reverse Engineering | C and Rust | Exploit | Linux kernel | PhD | My Tweets, My Opinions :) |
0xor0ne
@0xor0ne
Jun 13, 2023

Introduction to static analysis and CodeQL by Sylwia Budzynska (@github) github.blog/2023-03-31-cod… #codeql #infosec #cybersecurity #staticanalysis

0xor0ne's tweet image. Introduction to static analysis and CodeQL by Sylwia Budzynska (@github) github.blog/2023-03-31-cod… #codeql #infosec #cybersecurity #staticanalysis
0xor0ne's tweet image. Introduction to static analysis and CodeQL by Sylwia Budzynska (@github) github.blog/2023-03-31-cod… #codeql #infosec #cybersecurity #staticanalysis
0xor0ne's tweet image. Introduction to static analysis and CodeQL by Sylwia Budzynska (@github) github.blog/2023-03-31-cod… #codeql #infosec #cybersecurity #staticanalysis
0xor0ne's tweet image. Introduction to static analysis and CodeQL by Sylwia Budzynska (@github) github.blog/2023-03-31-cod… #codeql #infosec #cybersecurity #staticanalysis
1
33
141
49
16K
0xor0ne's profile picture. | CyberSecurity | Reverse Engineering | C and Rust | Exploit | Linux kernel | PhD | My Tweets, My Opinions :) |
0xor0ne
@0xor0ne
Aug 14, 2023

Two part series on using CodeQL for vulnerability research Excellent blog posts by Sylwia Budzynska (@github) Part 1: github.blog/2023-03-31-cod… Part 2: github.blog/2023-06-15-cod… #codeql #infosec

0xor0ne's tweet image. Two part series on using CodeQL for vulnerability research Excellent blog posts by Sylwia Budzynska (@github) Part 1: github.blog/2023-03-31-cod… Part 2: github.blog/2023-06-15-cod… #codeql #infosec
0xor0ne's tweet image. Two part series on using CodeQL for vulnerability research Excellent blog posts by Sylwia Budzynska (@github) Part 1: github.blog/2023-03-31-cod… Part 2: github.blog/2023-06-15-cod… #codeql #infosec
0xor0ne's tweet image. Two part series on using CodeQL for vulnerability research Excellent blog posts by Sylwia Budzynska (@github) Part 1: github.blog/2023-03-31-cod… Part 2: github.blog/2023-06-15-cod… #codeql #infosec
0
44
135
45
12K
0xor0ne's profile picture. | CyberSecurity | Reverse Engineering | C and Rust | Exploit | Linux kernel | PhD | My Tweets, My Opinions :) |
0xor0ne
@0xor0ne
Jun 1, 2023

Short introduction to CodeQL and SemGrep rules syntax (credits @spaceraccoonsec) spaceraccoon.dev/comparing-rule… #codeql #semgrep #infosec #cybersecurity

0xor0ne's tweet image. Short introduction to CodeQL and SemGrep rules syntax (credits @spaceraccoonsec) spaceraccoon.dev/comparing-rule… #codeql #semgrep #infosec #cybersecurity
0xor0ne's tweet image. Short introduction to CodeQL and SemGrep rules syntax (credits @spaceraccoonsec) spaceraccoon.dev/comparing-rule… #codeql #semgrep #infosec #cybersecurity
3
25
113
38
13K
Synacktiv's profile picture. Offensive security company. Dojo of many ninjas. Red teaming, reverse engineering, vuln research, dev of security tools and incident response.
Synacktiv
@Synacktiv
Mar 14, 2022

Finding #Java gadgets chains has never been so easy with the help of #CodeQL. Checkout our latest article, in which @hugow_vincent demonstrates a new technique to leverage the power of CodeQL to find new gadgets: synacktiv.com/en/publication… QLinspector: github.com/synacktiv/QLin…

Synacktiv's tweet image. Finding #Java gadgets chains has never been so easy with the help of #CodeQL. Checkout our latest article, in which @hugow_vincent demonstrates a new technique to leverage the power of CodeQL to find new gadgets: synacktiv.com/en/publication… QLinspector: github.com/synacktiv/QLin…
3
65
165
33
0
0xor0ne's profile picture. | CyberSecurity | Reverse Engineering | C and Rust | Exploit | Linux kernel | PhD | My Tweets, My Opinions :) |
0xor0ne
@0xor0ne
Jun 25, 2024

Series on code static analysis using CodeQL Credits Sylwia Budzynska (@GHSecurityLab) "CodeQL zero to hero" Part 1: github.blog/2023-03-31-cod… Part 2: github.blog/2023-06-15-cod… Part 3: github.blog/2024-04-29-cod… #codeql

0xor0ne's tweet image. Series on code static analysis using CodeQL Credits Sylwia Budzynska (@GHSecurityLab) "CodeQL zero to hero" Part 1: github.blog/2023-03-31-cod… Part 2: github.blog/2023-06-15-cod… Part 3: github.blog/2024-04-29-cod… #codeql
0xor0ne's tweet image. Series on code static analysis using CodeQL Credits Sylwia Budzynska (@GHSecurityLab) "CodeQL zero to hero" Part 1: github.blog/2023-03-31-cod… Part 2: github.blog/2023-06-15-cod… Part 3: github.blog/2024-04-29-cod… #codeql
0
42
171
89
9K
0xdea's profile picture. When cryptography is outlawed, bayl bhgynjf jvyy unir cevinpl.
[email protected]
 @0xdea
Mar 14, 2021

My #CodeQL journey continues… QL examples to search for likely bugs are useful! github.com/github/codeql/…

0xdea's tweet image. My #CodeQL journey continues… QL examples to search for likely bugs are useful! github.com/github/codeql/…
0
25
90
19
0
hugow_vincent's profile picture. Red Team and research @synacktiv @rustyphasm.bsky.social
Hugow
 @hugow_vincent
Mar 14, 2022

My new article about #Java gadgets chains and #CodeQL is out, new technique to find new chains 👹 synacktiv.com/publications/f…

hugow_vincent's tweet image. My new article about #Java gadgets chains and #CodeQL is out, new technique to find new chains 👹 synacktiv.com/publications/f…
4
43
150
18
0
pwntester's profile picture. Security Researcher with @XBOW. CTF #int3pids. Opinions here are mine! bluesky: https://t.co/9HRRzpBECt
Alvaro Muñoz
 @pwntester
Feb 19, 2021

#CodeQL was also used by @NASAJPL to find critical bugs on Curiosity mission 9 years ago and they were fixed remotely!

pwntester's tweet image. #CodeQL was also used by @NASAJPL to find critical bugs on Curiosity mission 9 years ago and they were fixed remotely!
pwntester's tweet image. #CodeQL was also used by @NASAJPL to find critical bugs on Curiosity mission 9 years ago and they were fixed remotely!
pwntester's tweet image. #CodeQL was also used by @NASAJPL to find critical bugs on Curiosity mission 9 years ago and they were fixed remotely!
natfriedman's profile picture. https://t.co/Lhh178sIjq
Nat Friedman
@natfriedman
Feb 19, 2021

Honored that @NASA is using GitHub, Actions, and CodeQL for the Mars drone flight software: github.com/nasa/fprime If anyone working on this needs GitHub support, please feel free to DM me directly!

natfriedman's tweet image. Honored that @NASA is using GitHub, Actions, and CodeQL for the Mars drone flight software: github.com/nasa/fprime If anyone working on this needs GitHub support, please feel free to DM me directly!
8
252
2K
67
0
5
85
294
14
0
leonjza's profile picture. ⟦ 'cto @sensepost', '@orangecyberdef', 'caffeine fueled', '(╯°□°)╯︵ ┻━┻', 'security guy', 'metalhead', 'i saw your password', 'KOOBo+KXleKAv+KXlSnjgaM=' ⟧
_leon_jacobs(💥)
 @leonjza
Aug 1, 2020

We're not only giving training at @BlackHatEvents and @_ringzer0 later today, but also have an internal #codeQL workshop by @HectorCuesta !

leonjza's tweet image. We're not only giving training at @BlackHatEvents and @_ringzer0 later today, but also have an internal #codeQL workshop by @HectorCuesta !
0
6
15
0
0
leonjza's profile picture. ⟦ 'cto @sensepost', '@orangecyberdef', 'caffeine fueled', '(╯°□°)╯︵ ┻━┻', 'security guy', 'metalhead', 'i saw your password', 'KOOBo+KXleKAv+KXlSnjgaM=' ⟧
_leon_jacobs(💥)
 @leonjza
Nov 18, 2020

Yes, #codeQL is basically magic.

leonjza's tweet image. Yes, #codeQL is basically magic.
0
0
6
0
0
pwntester's profile picture. Security Researcher with @XBOW. CTF #int3pids. Opinions here are mine! bluesky: https://t.co/9HRRzpBECt
Alvaro Muñoz
 @pwntester
Mar 11, 2021

Looking for something to do tomorrow afternoon? Join @pavgustinov and yours truly at 16:00 GMT to analyze CVE-2020-13924 (an RCE on Apache Druid) and model it with #CodeQL to find more variants! github.co/2OmRJc9

pwntester's tweet image. Looking for something to do tomorrow afternoon? Join @pavgustinov and yours truly at 16:00 GMT to analyze CVE-2020-13924 (an RCE on Apache Druid) and model it with #CodeQL to find more variants! github.co/2OmRJc9
1
13
48
6
0
0xdea's profile picture. When cryptography is outlawed, bayl bhgynjf jvyy unir cevinpl.
[email protected]
 @0xdea
Mar 10, 2021

Current status: having fun playing with @GHSecurityLab’s #CodeQL

0xdea's tweet image. Current status: having fun playing with @GHSecurityLab’s #CodeQL
2
0
4
1
0
GHSecurityLab's profile picture. GitHub Security Lab’s mission is to inspire and enable the community to secure the open source software we all depend on.
GitHub Security Lab
@GHSecurityLab
Aug 10, 2021

The Qihoo 360 Alpha Lab presented a great example of how #CodeQL driven variant analysis can be used to hunt for 0day in Chrome and amplify your security research results at Blackhat 2021: github.co/3iwh93J

GHSecurityLab's tweet image. The Qihoo 360 Alpha Lab presented a great example of how #CodeQL driven variant analysis can be used to hunt for 0day in Chrome and amplify your security research results at Blackhat 2021: github.co/3iwh93J
0
62
184
25
0
ptracesecurity's profile picture. Empowering IT Security Professionals through Hands-On Online Courses.
Ptrace Security GmbH
 @ptracesecurity
Apr 1, 2023

CodeQL zero to hero part 1: the fundamentals of static analysis for vulnerability research github.blog/2023-03-31-cod… #Pentesting #CodeQL #Vulnerability #CyberSecurity #Infosec

ptracesecurity's tweet image. CodeQL zero to hero part 1: the fundamentals of static analysis for vulnerability research github.blog/2023-03-31-cod… #Pentesting #CodeQL #Vulnerability #CyberSecurity #Infosec
ptracesecurity's tweet image. CodeQL zero to hero part 1: the fundamentals of static analysis for vulnerability research github.blog/2023-03-31-cod… #Pentesting #CodeQL #Vulnerability #CyberSecurity #Infosec
0
27
60
8
10K
GHSecurityLab's profile picture. GitHub Security Lab’s mission is to inspire and enable the community to secure the open source software we all depend on.
GitHub Security Lab
@GHSecurityLab
Feb 4, 2022

No os perdais la charla de @pwntester sobre #Log4Shell y #CodeQL. Mañana dia 5 a las 17:50 CET en la @h_c0n!

GHSecurityLab's tweet image. No os perdais la charla de @pwntester sobre #Log4Shell y #CodeQL. Mañana dia 5 a las 17:50 CET en la @h_c0n!
0
2
10
0
0

Something went wrong.


Something went wrong.


United States Trends