@joernio

Official account for joern. Discord: https://xitter.cf/t.co/3mbYQWuCeP

joern.io
Joined June 2020
  • Tweets29
  • Following50
  • Followers765
3Media
For your convenience, you can now dump a syntax-highlighted version of the ghidra decompiler output directly on the joern shell. (joern-1.1.313) - github.com/joernio/joern
18
88
Today we release a new default C/C++ frontend. The frontend is based on Eclipse CDT, handles modern C++ and the preprocessor and does NOT require a working build environment. Enjoy! github.com/joernio/joern/pul…

Make the new C/C++ frontend the default frontend by fabsx00 · Pull Request #698 · joernio/joern

After plenty of testing and improving of the macro handling, with this PR, we make the new Eclipse-CDT-based C/C++ the default frontend for C/C++. This enables us to process modern C++ and handle t...

github.com
15
58
Bringing you some ridiculously effective micro-optimizations for calculation of the data dependence graph: github.com/joernio/joern/pul… - about 2x :)

Significant performance improvements for data flow by fabsx00 · Pull Request #629 · joernio/joern

See Use BitSets in data flow analysis ShiftLeftSecurity/codepropertygraph#1449 Use integer sets in reaching definition calculation ShiftLeftSecurity/codepropertygraph#1448 In short, instead of us...

github.com
1
6
22
Psst. Joern 1.1.221 ships with a beta version of a new C/C++ frontend based on Eclipse CDT - out of the box handling of the preprocessor (including macro expansions), improved handling of templates and lambdas, more type information. Try out `importCode.newc("/path/to/code")`
8
20
Joern - the tool retweeted
thapr0digy@rshift31 Jul 2021
Replying to @richinseattle @h0mbre_
For not open source, try @joernio . I've had a good amount of success with this so far.
2
4
Joern - the tool retweeted
Fabian Yamaguchi@fabsx0016 Jun 2021
Happy to present a first draft of the Code Property Graph Specification 1.1: cpg.joern.io/
19
33
Joern - the tool retweeted
Jai@_jaiverma29 May 2021
Updated my posts about @joernio to work with the newer API and with the the super cool inter-procedural data-flow analysis support. jaiverma.github.io/blog/joer… jaiverma.github.io/blog/joer…
9
1
33
Joern will be presented at BlackHat Arsenal this summer: blackhat.com/us-21/arsenal/s…
14
1
70
Joern - the tool retweeted
Fabian Yamaguchi@fabsx0011 May 2021
We automatically identified a buffer overflow in VLC's updater (again) using `joern-scan`. Fixed in most recent release. Here is the write-up: joern.io/blog/vlc-automatic-…
71
4
192
And we forgot to click on "Set this link to never expire".. Please use this (permanent) link if you haven't joined us yet! discord.gg/vv4MH284Hc

Join the Joern.io Discord Server!

Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin/PHP based on code property graphs | 1588 members

discord.com
Join us on discord: discord.gg/zeHXQksy

Discord - Group Chat That’s All Fun & Games

Discord is great for playing games and chilling with friends, or even building a worldwide community. Customize your own space to talk, play, and hang out.

discord.com
3
7
Interesting post from @Forescout on how to find bugs (RCE/DoS) in DNS implementations forescout.com/company/blog/f… - and they share their joern queries github.com/Forescout/namewre…
5
18
At this year's @NorthSec_io, @tuxology and @vickieli7 will be giving a workshop on building DIY static code analyzers with joern! nsec.io/session/2021-diy-sta…
1
8
1
33
You can now use the Joern code querying engine for LLVM Bitcode! blog.llvm.org/posts/2021-02-… - Many thanks to @1101_debian of ShiftLeft for this contribution!

LLVM meets Code Property Graphs

The code property graph (CPG) is a data structure designed to mine large codebases for instances of programming patterns via a domain-specific query language. It was first introduced in the proceed...

blog.llvm.org
13
1
47
Joern now supports querying Java bytecode! Many thanks to @SDBakerEffendi who has kindly integrated his Plume code property graph generator with the platform. Read his post here: joern.io/blog/plume-brings-j…
15
2
39
Find realloc-related memory leaks: cpg.call("realloc").filter(call => call.inAssignment.target.code.exists(_ == call.argument(1).code)).dump
15
39
If you're looking for an adrenaline rush, you can now `curl -L github.com/ShiftLeftSecurity… | bash`. Use `sudo` for greater impact and `--reinstall` for `rm -rf` action #YOLO
1
1
5
Joern - the tool retweeted
David Korczynski@Davkorcz3 Jan 2021
Replying to @fabsx00
Awesome! And an impressive proportion of the bugs too with 67% versus 33% by fuzzing.
1
4
Joern - the tool retweeted
Fabian Yamaguchi@fabsx003 Jan 2021
Great to see the Joern code querying engine (github.com/ShiftLeftSecurity…) as the static bug hunting tool of choice for uncovering the Amnesia:33 TCP/IP stack vulns! forescout.com/company/resour…
1
11
62
Joern - the tool retweeted
Claudiu-Vlad Ursache
@ursachec24 Nov 2020
Wrote a little blogpost visualizing program structure characteristics for 12 million lines of code using @joernio and the Code Property Graph blog.shiftleft.io/visualizin…
10
1
21
Load more