Code Vigilant

Code Vigilant is a project by @anantshri to learn source code analysis and as part of it help to secure the Open Source softwares.

[Code Vigilant @CodeVigilant]

We have been using @semgrep in our code hunting experiments. we will slowly and steadily release our rules https://t.co/4tFjI8zJTc star to get notifications.

[Anant Shrivastava @anantshri]

fully in agreement and also a shameless plug. people say SQL injection is dying refer https://t.co/iBmmTUfXai to see how many SQLi bugs we found in wordpress plugins this year itself

[Code Vigilant @CodeVigilant]

congratulations to @_WPScan_ team (@ethicalhack3r @erwan_lr ) for the aquisition this is a brilliant move by @WordPress and with this we hope more security focused approach comes to wordpress eco system.

[Ryan Dewhurst @ethicalhack3r]

I'm excited to be able to let you all know that WPScan has been acquired by @automattic @jetpack.

I want to thank everybody that has ever supported me and believed in me.

https://t.co/c615PJ5qQN

[Snyk @snyksec]

Great news!
🥁
.. 🥁
🥁

Snyk Code support for #PHP vulnerability scanning is available in beta.

Give it a try and share your feedback!

https://t.co/yowwDD8tVD

[Code Vigilant @CodeVigilant]

Oh BTW we released set of disclosures few days back https://t.co/JT64V4Eo46 ~10 SQLi and others ranging from Unauthenticated to authenticated, SQLi to XSS in wordpress plugins. kudoes to @shreyapohekar and @beingsheerazali for continuous hardwork and @_WPScan_ for disclosure help

[Code Vigilant @CodeVigilant]

At @CodeVigilant we encounter interesting scenarios on a regular basis. @shreyapohekar explores one such interesting case in this blog. More details about exact vulnerability will soon be disclosed on https://t.co/4jZEemJvoW once we are done with responsible disclosure.

[Shreya Pohekar @shreyapohekar]

Just blogged about an interesting research where I got #xss even when the filter was in place!😃 A must read for both developers and web-pentesters!

https://t.co/kpmRX66thK

#infosec #bugbounty #bugbountytips #dev #owasp

[Sheeraz Ali @beingsheerazali]

I cant even explain how good this feels. I am thrilled to announce I got my first CVE. CVE-2021-24337 video-embed-box Subscriber level SQLI.
Thanks @CodeVigilant & @anantshri for letting me work on this
Disclosure: https://t.co/sycOYhzjLK

#infosec #bugbounty #tech #websecurity

[Code Vigilant @CodeVigilant]

Congrats to @beingsheerazali for grabbing his first CVE. SQL Injection Identified in Wordpress plugin “video embed box” https://t.co/h17PbwF8NS

[Code Vigilant @CodeVigilant]

Congrats to @shreyapohekar for getting her first CVE https://t.co/mSd3CSAwiV She found a unauthenticated SQL Injection in a wordpress plugin.

[Code Vigilant @CodeVigilant]

And we are Back. First discosure of this round is an unathenticated SQL Injection in wordpress plugin cars-seller-auto-classified-script https://t.co/z30MxOoZdF Thanks to @_WPScan_ for help with disclosure co-ordination.

[Code Vigilant @CodeVigilant]

I have read somewhere if you take a prolonged rest you need to start from step 0. before we run we need to walk, before we walk we need to crawl. Step 0: We have rewrote our full website and a new website is now live. no visual change but the backend is now a static site.

[Code Vigilant @CodeVigilant]

Hello World, We have been dormant here for many years. Excited about the new stuff in making, Stay tuned, more updates will follow in the next few days.

[Code Vigilant @CodeVigilant]

Preventing XSS Attacks in WordPress: Complete Guide to Validating, Sanitizing, and Escaping Data : https://t.co/CKQjPOX1Dw

[Code Vigilant @CodeVigilant]

Project Lead for @CodeVigilant is present at #BH2015 tweet to @anantshri if you want to catchup.

[Code Vigilant @CodeVigilant]

The story of initial experiments @CodeVigilant by @anantshri during @_c0c0n_ 2014 : My tryst with sourcecode review : http://t.co/EtFDtz5MtI

[Abhinav Sejpal @AbhinavSejpal]

#nullhumla Thank you @_WPScan_ and @CodeVigilant projects for such a great contribution! @anantshri @prajalkulkarni

[Code Vigilant @CodeVigilant]

@managewp Lets work towards getting rid of issues in repository and help standardization too. cc:@anantshri @prajalkulkarni

[Code Vigilant @CodeVigilant]

@nachiket_dessai Thanks a lot for the shoutout. cc:@prajalkulkarni @anantshri

[Code Vigilant @CodeVigilant]

@CodeVigilant welcomes "Project Zero" by @google an awesome lineup of hackers working towards Internet critical software security

[Code Vigilant @CodeVigilant]

wp-plugin : keyring – A3-Cross-Site Scripting (XSS): http://localhost/wp-content/plugins/keyring/includes/oaut... http://t.co/y1PqhkrtJl