CodeQLPy 自动化挖掘漏洞

https://github.com/webraybtl/CodeQLpy

https://github.com/github/codeql-cli-binaries/releases

～/CodeQL/codeql

export PATH=/User/xxxx/CodeQL/codeql:$PATH

source一下/etc/profile

git clone https://github.com/Semmle/ql

pip3 install -r requirements.txt

[codeql]              qlpath = /Users/xxxx/CodeQL/codeql/ql/java/ql/test              jdk8 = /Library/Java/JavaVirtualMachines/jdk1.8.0_112.jdk/Contents/Home/bin/java              jdk11 = /Library/Java/JavaVirtualMachines/jdk-11.0.15.1.jdk/Contents/Home/bin/java              idea_decode_tool = lib/java-decompiler.jar              jd_decode_tool  = lib/jd-cli.jar              jsp_decode_tool = lib/jsp2class.jar              ecj_tool = lib/ecj-4.6.1.jar              tomcat_jar = lib/tomcat_lib              spring_boot_jar = lib/spring_boot_lib              decode_savedir = out/decode/              general_dbpath = out/database/              maven_savedir  = out/mvn/              decompile_type = jd              debug = on              model = fast              thread_num = 10              

              [log]              path = out/log/

// -c 选项不加默认扫描java文件，加上即扫描class文件                // -t参数表示目标源码的路径，支持的源码类型是文件夹，jar包和war包                python3 main.py -t /Users/xxx/Desktop/SecExample-main

arch -x86_64 codeql database create out/database/SecExample-main --language=java --command="/bin/bash -c /Users/xxx/CodeQLpy/out/decode/run.sh" --overwrite

codeql database create out/database/SecExample-main --language=java --command="run.cmd" --overwrite

python3 main.py -d out/database/SecExample-main