Joern - the tool

Official account for joern.

Discord:

[Joern - the tool @joernio]

For your convenience, you can now dump a syntax-highlighted version of the ghidra decompiler output directly on the joern shell. (joern-1.1.313) - https://t.co/GwQ1fiohD3

[Joern - the tool @joernio]

Today we release a new default C/C++ frontend. The frontend is based on Eclipse CDT, handles modern C++ and the preprocessor and does NOT require a working build environment. Enjoy! https://t.co/OVwRVD3Bq0

[Joern - the tool @joernio]

Bringing you some ridiculously effective micro-optimizations for calculation of the data dependence graph: https://t.co/TLSl6nUiSs - about 2x :)

[Joern - the tool @joernio]

Psst. Joern 1.1.221 ships with a beta version of a new C/C++ frontend based on Eclipse CDT - out of the box handling of the preprocessor (including macro expansions), improved handling of templates and lambdas, more type information. Try out `importCode.newc("/path/to/code")`

[thapr0digy @rshift]

@richinseattle @h0mbre_ For not open source, try @joernio . I've had a good amount of success with this so far.

[Fabian Yamaguchi @fabsx00]

Happy to present a first draft of the Code Property Graph Specification 1.1: https://t.co/d0VJF1dM4S

[Jai @_jaiverma]

Updated my posts about @joernio to work with the newer API and with the the super cool inter-procedural data-flow analysis support.
https://t.co/q0wJGpT2nG
https://t.co/OxqL8e5vXJ

[Joern - the tool @joernio]

Joern will be presented at BlackHat Arsenal this summer: https://t.co/BBVTdwoGAb

[Fabian Yamaguchi @fabsx00]

We automatically identified a buffer overflow in VLC's updater (again) using `joern-scan`. Fixed in most recent release. Here is the write-up: https://t.co/yAgY5QNGww

[Joern - the tool @joernio]

And we forgot to click on "Set this link to never expire".. Please use this (permanent) link if you haven't joined us yet! https://t.co/bOYaeWK2f9

[Joern - the tool @joernio]

Join us on discord: https://t.co/0xK2LcR9XY

[Joern - the tool @joernio]

Interesting post from @Forescout on how to find bugs (RCE/DoS) in DNS implementations

https://t.co/LgXFvOGGDr

- and they share their joern queries

https://t.co/EZDH0ldsTc

[Joern - the tool @joernio]

At this year's @NorthSec_io, @tuxology and @vickieli7 will be giving a workshop on building DIY static code analyzers with joern! https://t.co/SqNxIyBpot

[Joern - the tool @joernio]

You can now use the Joern code querying engine for LLVM Bitcode! https://t.co/8kxRr87fSg - Many thanks to @1101_debian of ShiftLeft for this contribution!

[Joern - the tool @joernio]

Joern now supports querying Java bytecode! Many thanks to @SDBakerEffendi who has kindly integrated his Plume code property graph generator with the platform. Read his post here: https://t.co/f8wXTIMDiB

[Joern - the tool @joernio]

Find realloc-related memory leaks:
https://t.co/gurOgFlvD6("realloc").filter(call => https://t.co/gOVO0kldCM.code.exists(_ == call.argument(1).code)).dump

[Joern - the tool @joernio]

@joernchen =)

[Joern - the tool @joernio]

If you're looking for an adrenaline rush, you can now `curl -L https://t.co/WCeLaETaf5 | bash`. Use `sudo` for greater impact and `--reinstall` for `rm -rf` action #YOLO

[David Korczynski @Davkorcz]

@fabsx00 Awesome! And an impressive proportion of the bugs too with 67% versus 33% by fuzzing.

[Fabian Yamaguchi @fabsx00]

Great to see the Joern code querying engine (https://t.co/yl30CRsoRp) as the static bug hunting tool of choice for uncovering the Amnesia:33 TCP/IP stack vulns! https://t.co/c6FpQuXM6u