Перейти к содержимому

Using joern to Find GraphQL Authorization Issue

LiveUnderflow

0:00 / 0:00

Using joern to Find GraphQL Authorization Issue

8 994 просмотра · 3 г. назад
LiveUnderflow
39,3 тыс. подписчиков
8 994 просмотра · 3 г. назад
My Shop (advertisement): https://shop.liveoverflow.com/ We explore joern for the first time to write a query that can help us find a GraphQL authorization issue. Using CodeQL to find the same issue:    • Using CodeQL to Investigate GraphQL Resolvers   Watch the Series:    • Bug in CISA's Red Eye Tool   joern: https://joern.io/ RedEye Repository: https://github.com/cisagov/RedEye → Twitch Subscription:   / liveoverflow   → per Video:   / liveoverflow   → per Month:    / @liveoverflow   Chapters: 00:00 - Intro 00:31 - Recap: Research with CodeQL 01:51 - Setting Up joern 07:00 - First Tests with joern 15:31 - Realizing We Can Use Regex 20:06 - TypeScript vs. Transpiled JavaScript 21:25 - decorators in Transpiled JavaScript 35:23 - Building the Query 37:24 - Outro =[ 📄 Info. ]= Main Channel:    / @liveoverflow   Twitch:   / liveoverflow   =[ 🐕 Social ]= → Twitter:   / liveoverflow   → TikTok:   / liveoverflow_   → Website: https://liveoverflow.com/ → Subreddit:   / liveoverflow   → Facebook:   / liveoverflow   =[ 📄 P.S. ]= #liveoverflow