Using CodeQL to Investigate GraphQL Resolvers

[@jtw-r]

currently spending 9 hour days in graphql land for my company… and i saw this video. praying it isn’t a vulnerability i have to fix on my system 🙃

[@alexandreabashia]

48:12

[@0xgodson119]

thanks,this is something i wanted to learn for long time and i learned something here

[@hacktheboard]

It's very interesting and I can think of a lot of use cases where this tool can be helpful.

[@chasejensen88]

12:47 - Hi mom, yeah are you a database? No? Well what about Dad is he a database? No? Ok, Grandma? Mittens the kitten? Archie the doggie? WHAT THE _____ IS A Database?! Oh, it's a directory containing queryable data extracted from the code. Oh, ok

[@xerwinxpl]

i love how he acts when he is confused

[@GeekMasher]

So happy I could help!

[@gameboyv1790]

hi

[@cvabds]

This video was awesome, you are awesome 😎 you are too humble

[@Tiberius_Claudius]

But what if you also look for a vulnerability in the code of minecraft plugins?

[@sketchwaretagalogtutorials]

Happy, I helped too

[@futhedude4848]

recap: example of use CodeQL to write code manually to detect if the code missing "Authorization" decorator in some GrapQL project.

[@sushilakaushik1867]

Wow!

[@pwnweb5734]

information explosion at @17:09

[@JamieNadeau]

this whole thing is confusing to setup, they need to update their instructions to make it less confusing

[@apidas]

graphql is a joke

[@petersmit09]

why?