codeql-workshops-staging

KO | EN

gitlite — search

#react #typescript #golang #android #machine-learning #rust #nodejs #awesome #awesome-list #security #pytorch #ios #openai #open-source

codeql-workshops-staging

(★ 16)

Original workshops and staging area for new ones

codeql-workshops-staging 최신버젼 다운로드

최종 버전 다운로드 (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Introduction
This directory contains material for teaching/learning CodeQL.  It supplements
the more general introductory material and the reference material by presenting
full solutions for specific problems.

The presentations are split by the programming language they present, currently
c++, csharp, go, java and javascript.

The directory structure for all recent additions is

language/project/content

Some older workshops are in single files, with directory structure

language/project

The difficulty of these projects varies.  Further, some purely cover CodeQL
programming using an existing database while others include use of the command
line to create a database from code.

As a rough guide:
```
cpp
├── codeql-dataflow-sql-injection
├── codeql-workshop-cpp-bad-overflow-check.md
└── introduction
    ├── codeql-workshop-for-cpp.md
    ├── session-1
    ├── session-2
    ├── session-3
    └── session-4

csharp
├── codeql-workshop-csharp-unsafe-pointer-arithmetic.md
├── codeql-workshop-csharp-zipslip.md
└── top-down-vulnerability-guide.md

go
├── codeql-go-sqli
├── codeql-workshop-go-bad-redirect-check.md
├── oauth2-notes.org

java
├── Introduction\ to\ CodeQL\ -\ Java.pdf           | slide presentation 
├── codeql-java-workshop-notes.md                   | notes for presentation
├── apache-struts-online.txt                        |
├── codeql-dataflow-sql-injection/                  | full example, beginner, db build, source build
├── codeql-java-workshop-sqlinjection.md            | sql injection OWASP Security Shepherd
├── java-unsafe-deserialization.md                  | lecture notes
├── unsafe-deserialization-apache-struts.md         | unsafe deserialization, compact, intermediate, db build
└── workshop-java-mismatched-loop-condition.md      |

javascript
├── codeql-js-goof-workshop  | Full example illustrating all the steps, beginner, db build, source build
├── codeql-workshop-javascript-unsafe-jquery-calls.md | pure codeql, beginner

python
└── codeql-dataflow-sql-injection | Full example, beginner, db build, source build
```

# Status & Roadmap
These are actively developed and used workshops and are subject to editorial changes at any time.  We are planning to add
intermediate and advanced material as time permits.

# Setup and running
Currently all projects require installing VS Code and the CodeQL extension.  They can
be run on linux, macOS, and Windows.  Some additionally require the CodeQL command
line tools.  See the individual project's instructions, or 
[here for the cli](./common/cli-for-codeql.org) and 
[here for VS Code](./common/vscode-for-codeql.org)

# Contributing
New tutorials should use the `language/project/content` structure to allow for
expansion.

This is a **staging** area, so the rules are relaxed:
- If you have bare content that you have used, it's good enough.
- If you have a writeup that you think you will use, it's good enough.
- Err on the side of too little content; maybe someone else will use it as a starting point.
- Don't wait for PR's when you're adding new content, or making minor changes.

While evolving content, the goal should be learning and explaining CodeQL and
the content should eventually cover these items:
1. A high-level problem description
2. The specific parts of the original source code to be analyzed 
3. Descriptions of the CodeQL predicates/classes developed
4. A description of the final query

codeql-workshops-staging

codeql-workshops-staging 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

codeql-workshops-staging

codeql-workshops-staging 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README