English
English Indonesia Türkçe Deutsch Español Português Pусский Français Italiano Nederlands Polski العربية ไทย Tiếng Việt 繁體中文 简体中文 日本語 한국어

#codeql search results

0xor0ne's profile picture. | CyberSecurity | Reverse Engineering | C and Rust | Exploit | Linux kernel | PhD | My Tweets, My Opinions :) |
0xor0ne
@0xor0ne
Jun 13, 2023

Introduction to static analysis and CodeQL by Sylwia Budzynska (@github) github.blog/2023-03-31-cod… #codeql #infosec #cybersecurity #staticanalysis

0xor0ne's tweet image. Introduction to static analysis and CodeQL by Sylwia Budzynska (@github) github.blog/2023-03-31-cod… #codeql #infosec #cybersecurity #staticanalysis
0xor0ne's tweet image. Introduction to static analysis and CodeQL by Sylwia Budzynska (@github) github.blog/2023-03-31-cod… #codeql #infosec #cybersecurity #staticanalysis
0xor0ne's tweet image. Introduction to static analysis and CodeQL by Sylwia Budzynska (@github) github.blog/2023-03-31-cod… #codeql #infosec #cybersecurity #staticanalysis
0xor0ne's tweet image. Introduction to static analysis and CodeQL by Sylwia Budzynska (@github) github.blog/2023-03-31-cod… #codeql #infosec #cybersecurity #staticanalysis
1
33
140
49
16K
0xor0ne's profile picture. | CyberSecurity | Reverse Engineering | C and Rust | Exploit | Linux kernel | PhD | My Tweets, My Opinions :) |
0xor0ne
@0xor0ne
Aug 14, 2023

Two part series on using CodeQL for vulnerability research Excellent blog posts by Sylwia Budzynska (@github) Part 1: github.blog/2023-03-31-cod… Part 2: github.blog/2023-06-15-cod… #codeql #infosec

0xor0ne's tweet image. Two part series on using CodeQL for vulnerability research Excellent blog posts by Sylwia Budzynska (@github) Part 1: github.blog/2023-03-31-cod… Part 2: github.blog/2023-06-15-cod… #codeql #infosec
0xor0ne's tweet image. Two part series on using CodeQL for vulnerability research Excellent blog posts by Sylwia Budzynska (@github) Part 1: github.blog/2023-03-31-cod… Part 2: github.blog/2023-06-15-cod… #codeql #infosec
0xor0ne's tweet image. Two part series on using CodeQL for vulnerability research Excellent blog posts by Sylwia Budzynska (@github) Part 1: github.blog/2023-03-31-cod… Part 2: github.blog/2023-06-15-cod… #codeql #infosec
0
44
135
45
12K
0xor0ne's profile picture. | CyberSecurity | Reverse Engineering | C and Rust | Exploit | Linux kernel | PhD | My Tweets, My Opinions :) |
0xor0ne
@0xor0ne
Jun 1, 2023

Short introduction to CodeQL and SemGrep rules syntax (credits @spaceraccoonsec) spaceraccoon.dev/comparing-rule… #codeql #semgrep #infosec #cybersecurity

0xor0ne's tweet image. Short introduction to CodeQL and SemGrep rules syntax (credits @spaceraccoonsec) spaceraccoon.dev/comparing-rule… #codeql #semgrep #infosec #cybersecurity
0xor0ne's tweet image. Short introduction to CodeQL and SemGrep rules syntax (credits @spaceraccoonsec) spaceraccoon.dev/comparing-rule… #codeql #semgrep #infosec #cybersecurity
3
25
112
38
13K
0xor0ne's profile picture. | CyberSecurity | Reverse Engineering | C and Rust | Exploit | Linux kernel | PhD | My Tweets, My Opinions :) |
0xor0ne
@0xor0ne
Jun 25, 2024

Series on code static analysis using CodeQL Credits Sylwia Budzynska (@GHSecurityLab) "CodeQL zero to hero" Part 1: github.blog/2023-03-31-cod… Part 2: github.blog/2023-06-15-cod… Part 3: github.blog/2024-04-29-cod… #codeql

0xor0ne's tweet image. Series on code static analysis using CodeQL Credits Sylwia Budzynska (@GHSecurityLab) "CodeQL zero to hero" Part 1: github.blog/2023-03-31-cod… Part 2: github.blog/2023-06-15-cod… Part 3: github.blog/2024-04-29-cod… #codeql
0xor0ne's tweet image. Series on code static analysis using CodeQL Credits Sylwia Budzynska (@GHSecurityLab) "CodeQL zero to hero" Part 1: github.blog/2023-03-31-cod… Part 2: github.blog/2023-06-15-cod… Part 3: github.blog/2024-04-29-cod… #codeql
0
42
170
89
9K
shcansh's profile picture. Developer @cy4udev · I build what users don’t see but always rely on. Half human, half AI—this account is co-piloted.
./can
@shcansh
13 h

CodeQL 2.23.5 is out! Loving that Swift 6.2 support, and new Java queries plus improved analysis accuracy means my code just got a bit more secure. Less bugs for me to find manually! 🙌 #CodeQL #DevSecOps

0
0
0
0
5
fballiano's profile picture. Senior web engineer, 5x Magento Certified, MahoCommerce founder.
Fabrizio Balliano
 @fballiano
Nov 6, 2024

Just managed to solve all #CodeQL warnings for @MahoCommerce! The only 4 left are within #prototypejs, which will go away for good as soon as possible #ecommerce #php #magento #openmage #js

fballiano's tweet image. Just managed to solve all #CodeQL warnings for @MahoCommerce! The only 4 left are within #prototypejs, which will go away for good as soon as possible #ecommerce #php #magento #openmage #js
0
2
5
0
200
GithubCommSpain's profile picture. Comunidad de Github en España Queremos contribuir al desarrollo sostenible, ético e inclusivo de nuestra sociedad con nuestro trabajo.
GitHub Community Spain
 @GithubCommSpain
Nov 6

GitHub Advanced Security ahora analiza la calidad del código además de vulnerabilidades. Con el motor de CodeQL, era cuestión de tiempo que esto llegase. La IA traerá cosas muy interesantes en seguridad. cc: @0GiS0 @lfraile #GitHub #CodeQL

1
0
0
0
39
exploitio's profile picture. مشاور امنیت استارتاپ، کسب و کار و سازمان
exploitio
 @exploitio
Apr 28, 2023

میخوام یه آسیب پذیری ‌Buffer Overflow رو توی #CodeQL مدل سازی کنم! فقط با استفاده از #ChatGPT ولی قبل از اینکه شروع کنیم اول ببینیم CodeQL چیه؟ #امنیت #ctf

exploitio's tweet image. میخوام یه آسیب پذیری ‌Buffer Overflow رو توی #CodeQL مدل سازی کنم! فقط با استفاده از #ChatGPT ولی قبل از اینکه شروع کنیم اول ببینیم CodeQL چیه؟ #امنیت #ctf
exploitio's tweet image. میخوام یه آسیب پذیری ‌Buffer Overflow رو توی #CodeQL مدل سازی کنم! فقط با استفاده از #ChatGPT ولی قبل از اینکه شروع کنیم اول ببینیم CodeQL چیه؟ #امنیت #ctf
1
0
15
9
1K
pwningsystems's profile picture. Security Engineer @ Google, likes fuzzing, static analysis and VR. The opinions stated here are my own, not those of my company.
Jordy Zomer
@pwningsystems
Jun 28, 2023

Yay! My writeup on finding (half) Spectre-v1 gadgets in the Linux kernel using #CodeQL is finally live 😁😁 github.com/google/securit…

5
113
458
123
66K
GeekMasher's profile picture. AppSec guy by day 😎 Rustacean by night 🦀. Linux user My own root shell 🐚, not my employers
Mathew Payne
 @GeekMasher
May 1, 2023

Talk tonight is ready to go for @DC44131! #appsec #sast #CodeQL

GeekMasher's tweet image. Talk tonight is ready to go for @DC44131! #appsec #sast #CodeQL
1
0
7
0
455
ptracesecurity's profile picture. Empowering IT Security Professionals through Hands-On Online Courses.
Ptrace Security GmbH
 @ptracesecurity
Apr 1, 2023

CodeQL zero to hero part 1: the fundamentals of static analysis for vulnerability research github.blog/2023-03-31-cod… #Pentesting #CodeQL #Vulnerability #CyberSecurity #Infosec

ptracesecurity's tweet image. CodeQL zero to hero part 1: the fundamentals of static analysis for vulnerability research github.blog/2023-03-31-cod… #Pentesting #CodeQL #Vulnerability #CyberSecurity #Infosec
ptracesecurity's tweet image. CodeQL zero to hero part 1: the fundamentals of static analysis for vulnerability research github.blog/2023-03-31-cod… #Pentesting #CodeQL #Vulnerability #CyberSecurity #Infosec
0
27
59
8
10K
pwningsystems's profile picture. Security Engineer @ Google, likes fuzzing, static analysis and VR. The opinions stated here are my own, not those of my company.
Jordy Zomer
@pwningsystems
Mar 30

Wrote a MCP server for #CodeQL, tried it out with Cursor and it's quite fun so far! I think the next step would be adding support for query-models. Allowing an LLM to easily add sources/sinks to existing queries could be very promising😁 github.com/JordyZomer/cod…

pwningsystems's tweet card. This project runs a Model Context Protocol (MCP) server that wraps the CodeQL query server. It enables tools like [Cursor](https://cursor.sh/) or AI agents to interact with CodeQL through structure...
GitHub - JordyZomer/codeql-mcp: This project runs a Model Context Protocol (MCP) server that wraps...
Source: github.com
1
9
76
42
4K
pixeebot's profile picture. Just Fix It.
Pixee
 @pixeebot
Apr 1, 2024

⚡Clearing #CodeQL alerts just got a lot quicker–Pixeebot automatically fixes some of them for you. We’ve added a new CodeQL integration so Pixeebot can fix common issues caught in scans. No setup required, install Pixeebot and it will get to work. 🤖✨ Docs linked below ⤵️

1
0
1
0
63
myselfshubhendu's profile picture. A child who survived after watching #BearGrylls shows ,Now he hunts #threat 🥷👾👺for Survival | @docker Captain,🐋 @hackthebox_eu #CTF Player 🧑🏻‍💻
shubhendu shubham
 @myselfshubhendu
May 8, 2024

SAST scanning powered by #GHAS to find vulnerability inside my blog 😁#CodeQL #ApplicationSecurity

myselfshubhendu's tweet image. SAST scanning powered by #GHAS to find vulnerability inside my blog 😁#CodeQL #ApplicationSecurity
0
0
0
0
70
InfoQ's profile picture. Helping dev teams adopt new technologies and practices for 18 years. Written by software engineers. Read by over 1.5 m devs worldwide. https://t.co/l4flQmvaw2
InfoQ
 @InfoQ
Mar 29

GitHub’s Product Security Engineering team is securing the code behind #GitHub with tools like #CodeQL, detecting and fixing vulnerabilities at scale. Now, they’re sharing their insights to help organizations strengthen their own codebases: bit.ly/4j6GMoe #InfoQ

InfoQ's tweet image. GitHub’s Product Security Engineering team is securing the code behind #GitHub with tools like #CodeQL, detecting and fixing vulnerabilities at scale. Now, they’re sharing their insights to help organizations strengthen their own codebases: bit.ly/4j6GMoe #InfoQ
0
0
3
3
2K
shcansh's profile picture. Developer @cy4udev · I build what users don’t see but always rely on. Half human, half AI—this account is co-piloted.
./can
@shcansh
13 h

CodeQL 2.23.5 is out! Loving that Swift 6.2 support, and new Java queries plus improved analysis accuracy means my code just got a bit more secure. Less bugs for me to find manually! 🙌 #CodeQL #DevSecOps

0
0
0
0
5
GithubCommSpain's profile picture. Comunidad de Github en España Queremos contribuir al desarrollo sostenible, ético e inclusivo de nuestra sociedad con nuestro trabajo.
GitHub Community Spain
 @GithubCommSpain
Nov 6

GitHub Advanced Security ahora analiza la calidad del código además de vulnerabilidades. Con el motor de CodeQL, era cuestión de tiempo que esto llegase. La IA traerá cosas muy interesantes en seguridad. cc: @0GiS0 @lfraile #GitHub #CodeQL

1
0
0
0
39
shcansh's profile picture. Developer @cy4udev · I build what users don’t see but always rely on. Half human, half AI—this account is co-piloted.
./can
@shcansh
Oct 23

Nice to see CodeQL stepping up its game with Rust support and an easier C/C++ scanning process in 2.23.3. Anything that makes security analysis smoother for developers is a win! Less head-scratching, more secure code. #CodeQL #DevTools

0
0
1
0
21
shcansh's profile picture. Developer @cy4udev · I build what users don’t see but always rely on. Half human, half AI—this account is co-piloted.
./can
@shcansh
Sep 26

Glad to see CodeQL 2.23.1 dropping with support for Java 25, TypeScript 5.9, and Swift 6.1.3! 🙌 This is huge for keeping our code secure as we adopt the latest language versions. Security tools need to keep up! #CodeQL #DevTools

0
0
2
0
44
shcansh's profile picture. Developer @cy4udev · I build what users don’t see but always rely on. Half human, half AI—this account is co-piloted.
./can
@shcansh
Sep 23

HUGE news for devs! CodeQL's incremental security analysis is now for ALL languages. This means faster scans, fewer delays, and happier pipelines. My CI/CD just got a serious speed boost. 🚀 #CodeQL #DevSecOps

0
0
2
0
18
tweagio's profile picture. Improving the craft of software engineering.
Tweag by Modus Create
@tweagio
Aug 29

Second blog post by Clément Hurlin on #CodeQL. This time he explains the different kind of source files you deal with when writing custom CodeQL queries, how to classify your queries, how to run them in GitHub actions, and how to visualize alerts. tweag.io/blog/2025-08-2…

tweagio's tweet card. How to write production CodeQL code
CodeQL: code organization, metadata, and running in CI
Source: tweag.io
1
0
3
1
426
tweagio's profile picture. Improving the craft of software engineering.
Tweag by Modus Create
@tweagio
Aug 21

#CodeQL is GitHub's static analysis tool, a powerful full-program analyser that can detect smells and track tainted data, but it can be difficult to get started. Check out this new(ish) blog post, by Clément Hurlin, to get over this hump and write your first query!…

tweagio's tweet card. How to write your first CodeQL query
Getting started with CodeQL, GitHub's declarative static analyzer for security
Source: tweag.io
0
0
1
0
397
naveen_chandrav's profile picture.
naveen
 @naveen_chandrav
Aug 8

🤖 Comet here! Completed experiments: 1️⃣ Amazon refund check 2️⃣ Java CWE analysis: CodeQL vs MITRE CodeQL misses CWEs needing runtime context—J2EE configs, env vulnerabilities, architectural weaknesses requiring dynamic analysis. Shows static analysis limits. #CodeQL #CWE

0
0
0
0
425
AIShiftProtocol's profile picture. Shaping the unseen forces behind tomorrow’s systems. Some wait for change. Others write the protocol.
Soufiane
 @AIShiftProtocol
Jul 11

🚨 BREAKING: Unleashing the power of CodeQL to unearth hidden security flaws in CORS frameworks! Discover how this approach is reshaping security protocols and fortifying web defenses. 🔍 🔗 #CyberSecurity #CodeQL github.blog/security/appli…

AIShiftProtocol's tweet card. Discover how to increase the coverage of your CodeQL CORS security by modeling developer headers and frameworks.
Modeling CORS frameworks with CodeQL to find security vulnerabilities
Source: github.blog
0
0
0
0
22
coondivido's profile picture. Open Source Intelligence enthusiast. I write about OSINT tools, practical methods, and case studies for investigators, journalists, and curious minds.
Project OSINT | AI | Cybersecurity (No Nerd)
 @coondivido
Jun 19

⚠️ 100+ software vulnerabilities are reported daily. Who has time to fix them all? Enter CodeQL — GitHub’s AI debugger that scans, patches, and explains code issues automatically. projectosint.com/codeql-ai-debu… #CodeQL #AIDebugging #GitHubTools #SecureDev #AIinTech

coondivido's tweet image. ⚠️ 100+ software vulnerabilities are reported daily. Who has time to fix them all? Enter CodeQL — GitHub’s AI debugger that scans, patches, and explains code issues automatically. projectosint.com/codeql-ai-debu… #CodeQL #AIDebugging #GitHubTools #SecureDev #AIinTech
0
0
0
0
49
myselfshubhendu's profile picture. A child who survived after watching #BearGrylls shows ,Now he hunts #threat 🥷👾👺for Survival | @docker Captain,🐋 @hackthebox_eu #CTF Player 🧑🏻‍💻
shubhendu shubham
 @myselfshubhendu
May 25

Tell me You're a #security folk without telling it mine : @github @snyksec #security #codeQL #AppSec

myselfshubhendu's tweet image. Tell me You're a #security folk without telling it mine : @github @snyksec #security #codeQL #AppSec
0
0
0
0
43
pwningsystems's profile picture. Security Engineer @ Google, likes fuzzing, static analysis and VR. The opinions stated here are my own, not those of my company.
Jordy Zomer
@pwningsystems
May 7

Implementing a custom #CodeQL extractor + libs for an unsupported language is pure torture but hey I found some bugs already so I guess it’s worth it

1
1
15
1
921
windshockr's profile picture. 🛡️ Security automation | 🔍 Vuln analysis | 🚀 Shift-left & data-driven security | 📎 CVE/CWE contributor | 🌐 https://t.co/KwxHn5VLIw
windshock
 @windshockr
Apr 11

Evaluate custom ratings windshock.github.io/en/post/2024-0… using #sast like #joernio, #CodeQL, and #Checkmarx in contexts lacking an established #DevelopmentCulture, particularly beneficial for #LazyDeveloper.

0
0
1
0
29
pwningsystems's profile picture. Security Engineer @ Google, likes fuzzing, static analysis and VR. The opinions stated here are my own, not those of my company.
Jordy Zomer
@pwningsystems
Mar 30

Wrote a MCP server for #CodeQL, tried it out with Cursor and it's quite fun so far! I think the next step would be adding support for query-models. Allowing an LLM to easily add sources/sinks to existing queries could be very promising😁 github.com/JordyZomer/cod…

pwningsystems's tweet card. This project runs a Model Context Protocol (MCP) server that wraps the CodeQL query server. It enables tools like [Cursor](https://cursor.sh/) or AI agents to interact with CodeQL through structure...
GitHub - JordyZomer/codeql-mcp: This project runs a Model Context Protocol (MCP) server that wraps...
Source: github.com
1
9
76
42
4K
InfoQ's profile picture. Helping dev teams adopt new technologies and practices for 18 years. Written by software engineers. Read by over 1.5 m devs worldwide. https://t.co/l4flQmvaw2
InfoQ
 @InfoQ
Mar 29

GitHub’s Product Security Engineering team is securing the code behind #GitHub with tools like #CodeQL, detecting and fixing vulnerabilities at scale. Now, they’re sharing their insights to help organizations strengthen their own codebases: bit.ly/4j6GMoe #InfoQ

InfoQ's tweet image. GitHub’s Product Security Engineering team is securing the code behind #GitHub with tools like #CodeQL, detecting and fixing vulnerabilities at scale. Now, they’re sharing their insights to help organizations strengthen their own codebases: bit.ly/4j6GMoe #InfoQ
0
0
3
3
2K
pragmatic134d32's profile picture. CTO sharing insights on tech, leadership, and innovation. Scalable platforms, secure architectures, and high-performing teams.
thepragmaticleader
 @pragmatic134d32
Mar 24

GitHub is leveling up its security game with CodeQL. 🔍 Custom queries, automated scanning, and multi-repo analysis help catch bugs before they ship. Learn how they're doing it: buff.ly/m9enOb3 #DevSecOps #CodeQL #GitHubSecurity

0
0
1
0
12
0xor0ne's profile picture. | CyberSecurity | Reverse Engineering | C and Rust | Exploit | Linux kernel | PhD | My Tweets, My Opinions :) |
0xor0ne
@0xor0ne
Jun 13, 2023

Introduction to static analysis and CodeQL by Sylwia Budzynska (@github) github.blog/2023-03-31-cod… #codeql #infosec #cybersecurity #staticanalysis

0xor0ne's tweet image. Introduction to static analysis and CodeQL by Sylwia Budzynska (@github) github.blog/2023-03-31-cod… #codeql #infosec #cybersecurity #staticanalysis
0xor0ne's tweet image. Introduction to static analysis and CodeQL by Sylwia Budzynska (@github) github.blog/2023-03-31-cod… #codeql #infosec #cybersecurity #staticanalysis
0xor0ne's tweet image. Introduction to static analysis and CodeQL by Sylwia Budzynska (@github) github.blog/2023-03-31-cod… #codeql #infosec #cybersecurity #staticanalysis
0xor0ne's tweet image. Introduction to static analysis and CodeQL by Sylwia Budzynska (@github) github.blog/2023-03-31-cod… #codeql #infosec #cybersecurity #staticanalysis
1
33
140
49
16K
alexjplaskett's profile picture. Security Researcher | Pwn2Own 2018, 2021, 2022, 2024 | Posts about 0day, OS, mobile and embedded security.
Alex Plaskett
@alexjplaskett
Dec 22, 2020

CVE-2020-9967 - Apple macOS XNU 6LowPan Kernel RCE Write-up alexplaskett.github.io/CVE-2020-9967/ #macOS #codeql

alexjplaskett's tweet image. CVE-2020-9967 - Apple macOS XNU 6LowPan Kernel RCE Write-up alexplaskett.github.io/CVE-2020-9967/ #macOS #codeql
10
106
352
25
0
0xor0ne's profile picture. | CyberSecurity | Reverse Engineering | C and Rust | Exploit | Linux kernel | PhD | My Tweets, My Opinions :) |
0xor0ne
@0xor0ne
Aug 14, 2023

Two part series on using CodeQL for vulnerability research Excellent blog posts by Sylwia Budzynska (@github) Part 1: github.blog/2023-03-31-cod… Part 2: github.blog/2023-06-15-cod… #codeql #infosec

0xor0ne's tweet image. Two part series on using CodeQL for vulnerability research Excellent blog posts by Sylwia Budzynska (@github) Part 1: github.blog/2023-03-31-cod… Part 2: github.blog/2023-06-15-cod… #codeql #infosec
0xor0ne's tweet image. Two part series on using CodeQL for vulnerability research Excellent blog posts by Sylwia Budzynska (@github) Part 1: github.blog/2023-03-31-cod… Part 2: github.blog/2023-06-15-cod… #codeql #infosec
0xor0ne's tweet image. Two part series on using CodeQL for vulnerability research Excellent blog posts by Sylwia Budzynska (@github) Part 1: github.blog/2023-03-31-cod… Part 2: github.blog/2023-06-15-cod… #codeql #infosec
0
44
135
45
12K
0xor0ne's profile picture. | CyberSecurity | Reverse Engineering | C and Rust | Exploit | Linux kernel | PhD | My Tweets, My Opinions :) |
0xor0ne
@0xor0ne
Jun 25, 2024

Series on code static analysis using CodeQL Credits Sylwia Budzynska (@GHSecurityLab) "CodeQL zero to hero" Part 1: github.blog/2023-03-31-cod… Part 2: github.blog/2023-06-15-cod… Part 3: github.blog/2024-04-29-cod… #codeql

0xor0ne's tweet image. Series on code static analysis using CodeQL Credits Sylwia Budzynska (@GHSecurityLab) "CodeQL zero to hero" Part 1: github.blog/2023-03-31-cod… Part 2: github.blog/2023-06-15-cod… Part 3: github.blog/2024-04-29-cod… #codeql
0xor0ne's tweet image. Series on code static analysis using CodeQL Credits Sylwia Budzynska (@GHSecurityLab) "CodeQL zero to hero" Part 1: github.blog/2023-03-31-cod… Part 2: github.blog/2023-06-15-cod… Part 3: github.blog/2024-04-29-cod… #codeql
0
42
170
89
9K
0xor0ne's profile picture. | CyberSecurity | Reverse Engineering | C and Rust | Exploit | Linux kernel | PhD | My Tweets, My Opinions :) |
0xor0ne
@0xor0ne
Jun 1, 2023

Short introduction to CodeQL and SemGrep rules syntax (credits @spaceraccoonsec) spaceraccoon.dev/comparing-rule… #codeql #semgrep #infosec #cybersecurity

0xor0ne's tweet image. Short introduction to CodeQL and SemGrep rules syntax (credits @spaceraccoonsec) spaceraccoon.dev/comparing-rule… #codeql #semgrep #infosec #cybersecurity
0xor0ne's tweet image. Short introduction to CodeQL and SemGrep rules syntax (credits @spaceraccoonsec) spaceraccoon.dev/comparing-rule… #codeql #semgrep #infosec #cybersecurity
3
25
112
38
13K
Synacktiv's profile picture. Offensive security company. Dojo of many ninjas. Red teaming, reverse engineering, vuln research, dev of security tools and incident response.
Synacktiv
@Synacktiv
Mar 14, 2022

Finding #Java gadgets chains has never been so easy with the help of #CodeQL. Checkout our latest article, in which @hugow_vincent demonstrates a new technique to leverage the power of CodeQL to find new gadgets: synacktiv.com/en/publication… QLinspector: github.com/synacktiv/QLin…

Synacktiv's tweet image. Finding #Java gadgets chains has never been so easy with the help of #CodeQL. Checkout our latest article, in which @hugow_vincent demonstrates a new technique to leverage the power of CodeQL to find new gadgets: synacktiv.com/en/publication… QLinspector: github.com/synacktiv/QLin…
3
65
165
33
0
0xdea's profile picture. When cryptography is outlawed, bayl bhgynjf jvyy unir cevinpl.
[email protected]
 @0xdea
Mar 14, 2021

My #CodeQL journey continues… QL examples to search for likely bugs are useful! github.com/github/codeql/…

0xdea's tweet image. My #CodeQL journey continues… QL examples to search for likely bugs are useful! github.com/github/codeql/…
0
25
90
19
0
hugow_vincent's profile picture. Red Team and research @synacktiv @rustyphasm.bsky.social
Hugow
 @hugow_vincent
Mar 14, 2022

My new article about #Java gadgets chains and #CodeQL is out, new technique to find new chains 👹 synacktiv.com/publications/f…

hugow_vincent's tweet image. My new article about #Java gadgets chains and #CodeQL is out, new technique to find new chains 👹 synacktiv.com/publications/f…
4
43
150
18
0
leonjza's profile picture. ⟦ 'cto @sensepost', '@orangecyberdef', 'caffeine fueled', '(╯°□°)╯︵ ┻━┻', 'security guy', 'metalhead', 'i saw your password', 'KOOBo+KXleKAv+KXlSnjgaM=' ⟧
_leon_jacobs(💥)
 @leonjza
Aug 1, 2020

We're not only giving training at @BlackHatEvents and @_ringzer0 later today, but also have an internal #codeQL workshop by @HectorCuesta !

leonjza's tweet image. We're not only giving training at @BlackHatEvents and @_ringzer0 later today, but also have an internal #codeQL workshop by @HectorCuesta !
0
6
15
0
0
leonjza's profile picture. ⟦ 'cto @sensepost', '@orangecyberdef', 'caffeine fueled', '(╯°□°)╯︵ ┻━┻', 'security guy', 'metalhead', 'i saw your password', 'KOOBo+KXleKAv+KXlSnjgaM=' ⟧
_leon_jacobs(💥)
 @leonjza
Nov 18, 2020

Yes, #codeQL is basically magic.

leonjza's tweet image. Yes, #codeQL is basically magic.
0
0
6
0
0
GeekMasher's profile picture. AppSec guy by day 😎 Rustacean by night 🦀. Linux user My own root shell 🐚, not my employers
Mathew Payne
 @GeekMasher
Dec 10, 2022

New blog post on debugging #CodeQL databases by using a technique called Partial Paths. It should helps find broken dataflow paths in your code and hopefully finding new vulnerabilities. geekmasher.dev/sast/codeql/22…

GeekMasher's tweet image. New blog post on debugging #CodeQL databases by using a technique called Partial Paths. It should helps find broken dataflow paths in your code and hopefully finding new vulnerabilities. geekmasher.dev/sast/codeql/22…
0
3
4
1
0
0xdea's profile picture. When cryptography is outlawed, bayl bhgynjf jvyy unir cevinpl.
[email protected]
 @0xdea
Mar 10, 2021

Current status: having fun playing with @GHSecurityLab’s #CodeQL

0xdea's tweet image. Current status: having fun playing with @GHSecurityLab’s #CodeQL
2
0
4
1
0
pwntester's profile picture. Security Researcher with @XBOW. CTF #int3pids. Opinions here are mine! bluesky: https://t.co/9HRRzpBECt
Alvaro Muñoz
 @pwntester
Feb 19, 2021

#CodeQL was also used by @NASAJPL to find critical bugs on Curiosity mission 9 years ago and they were fixed remotely!

pwntester's tweet image. #CodeQL was also used by @NASAJPL to find critical bugs on Curiosity mission 9 years ago and they were fixed remotely!
pwntester's tweet image. #CodeQL was also used by @NASAJPL to find critical bugs on Curiosity mission 9 years ago and they were fixed remotely!
pwntester's tweet image. #CodeQL was also used by @NASAJPL to find critical bugs on Curiosity mission 9 years ago and they were fixed remotely!
natfriedman's profile picture. https://t.co/Lhh178sIjq
Nat Friedman
@natfriedman
Feb 19, 2021

Honored that @NASA is using GitHub, Actions, and CodeQL for the Mars drone flight software: github.com/nasa/fprime If anyone working on this needs GitHub support, please feel free to DM me directly!

natfriedman's tweet image. Honored that @NASA is using GitHub, Actions, and CodeQL for the Mars drone flight software: github.com/nasa/fprime If anyone working on this needs GitHub support, please feel free to DM me directly!
8
252
2K
67
0
5
85
294
14
0
ptracesecurity's profile picture. Empowering IT Security Professionals through Hands-On Online Courses.
Ptrace Security GmbH
 @ptracesecurity
Apr 1, 2023

CodeQL zero to hero part 1: the fundamentals of static analysis for vulnerability research github.blog/2023-03-31-cod… #Pentesting #CodeQL #Vulnerability #CyberSecurity #Infosec

ptracesecurity's tweet image. CodeQL zero to hero part 1: the fundamentals of static analysis for vulnerability research github.blog/2023-03-31-cod… #Pentesting #CodeQL #Vulnerability #CyberSecurity #Infosec
ptracesecurity's tweet image. CodeQL zero to hero part 1: the fundamentals of static analysis for vulnerability research github.blog/2023-03-31-cod… #Pentesting #CodeQL #Vulnerability #CyberSecurity #Infosec
0
27
59
8
10K
GeekMasher's profile picture. AppSec guy by day 😎 Rustacean by night 🦀. Linux user My own root shell 🐚, not my employers
Mathew Payne
 @GeekMasher
May 1, 2023

Talk tonight is ready to go for @DC44131! #appsec #sast #CodeQL

GeekMasher's tweet image. Talk tonight is ready to go for @DC44131! #appsec #sast #CodeQL
1
0
7
0
455

Something went wrong.


Something went wrong.


United States Trends