Using joern to Find GraphQL Authorization Issue
LiveUnderflow
0:00 / 0:00
Using joern to Find GraphQL Authorization Issue
8 994 просмотра · 3 г. назад
LiveUnderflow
39,3 тыс. подписчиков
8 994 просмотра · 3 г. назад
My Shop (advertisement): https://shop.liveoverflow.com/
We explore joern for the first time to write a query that can help us find a GraphQL authorization issue.
Using CodeQL to find the same issue: • Using CodeQL to Investigate GraphQL Resolvers
Watch the Series: • Bug in CISA's Red Eye Tool
joern: https://joern.io/
RedEye Repository: https://github.com/cisagov/RedEye
→ Twitch Subscription: / liveoverflow
→ per Video: / liveoverflow
→ per Month: / @liveoverflow
Chapters:
00:00 - Intro
00:31 - Recap: Research with CodeQL
01:51 - Setting Up joern
07:00 - First Tests with joern
15:31 - Realizing We Can Use Regex
20:06 - TypeScript vs. Transpiled JavaScript
21:25 - decorators in Transpiled JavaScript
35:23 - Building the Query
37:24 - Outro
=[ 📄 Info. ]=
Main Channel: / @liveoverflow
Twitch: / liveoverflow
=[ 🐕 Social ]=
→ Twitter: / liveoverflow
→ TikTok: / liveoverflow_
→ Website: https://liveoverflow.com/
→ Subreddit: / liveoverflow
→ Facebook: / liveoverflow
=[ 📄 P.S. ]=
#liveoverflow