Using joern to Find GraphQL Authorization Issue

Channel:

LiveUnderflow

Subscribers:

39,500

Published on December 30, 2022 3:15:02 PM ● Video Link: https://www.youtube.com/watch?v=tBon33o2aS4

Duration: 37:47

5,489 views

171

My Shop (advertisement): https://shop.liveoverflow.com/

We explore joern for the first time to write a query that can help us find a GraphQL authorization issue.

Using CodeQL to find the same issue: https://www.youtube.com/watch?v=VrF1RwnJzBk&list=PLGPckJAmiZCR3BIPhpmOL3l0wC6hBCk6W&index=1
Watch the Series: https://www.youtube.com/playlist?list=PLGPckJAmiZCR3BIPhpmOL3l0wC6hBCk6W

joern: https://joern.io/
RedEye Repository: https://github.com/cisagov/RedEye

→ Twitch Subscription: https://www.twitch.tv/products/liveoverflow
→ per Video: https://www.patreon.com/join/liveoverflow
→ per Month: https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join

Chapters:
00:00 - Intro
00:31 - Recap: Research with CodeQL
01:51 - Setting Up joern
07:00 - First Tests with joern
15:31 - Realizing We Can Use Regex
20:06 - TypeScript vs. Transpiled JavaScript
21:25 - decorators in Transpiled JavaScript
35:23 - Building the Query
37:24 - Outro

=[ 📄 Info. ]=

Main Channel: https://youtube.com/@LiveOverflow
Twitch: https://twitch.tv/LiveOverflow

=[ 🐕 Social ]=

→ Twitter: https://twitter.com/LiveOverflow/
→ TikTok: https://www.tiktok.com/@liveoverflow_
→ Website: https://liveoverflow.com/
→ Subreddit: https://www.reddit.com/r/LiveOverflow/
→ Facebook: https://www.facebook.com/LiveOverflow/

=[ 📄 P.S. ]=

#liveoverflow