wSAST Support @wsastsupport

Support for wSAST (https://t.co/TbMwz0RfG3) Joined June 2022

Tweets

19
Followers

84
Following

1
Likes

3

wSAST Support @wsastsupport

11 months ago

Our activation server had a problem updating which may have made activation of wSAST fail - if you encountered this please try again it should all be fixed now!

0 1 1 1K 0

Peter Winter-Smith @peterwintrsmith

11 months ago

My @IOActive hack::soho talk on wSAST is finally online! If static code analysis interests you then you may enjoy hearing a little about the journey, trials and tribulations of building a SAST engine from scratch! youtu.be/QEBRx42uk50?si…

2 23 68 7K 27

wSAST Support @wsastsupport

a year ago

Finally the latest wSAST update is released. This adds a number of optimisations for repeated function calls, fixes some bugs in rules engine instance sharing, and adds more rules courtesy of GPT. Full changes here: github.com/wsast/docs/blo… User guide: github.com/wsast/docs/blo…

0 0 6 3K 1

Download Image

Peter Winter-Smith @peterwintrsmith

2 years ago

Thanks everyone who came out to @IOActive hack soho to see my talk on wSAST! I’ve put my slides online here: wsast.co.uk/ioa-hs-winter2…

1 19 39 8K 5

Peter Winter-Smith @peterwintrsmith

2 years ago

I had an idea for @wsastsupport - I might write a “parser” that allows you to specify language components in a regex form (how to extract a class name, method, statements, expressions, etc.) and have wSAST look up based on the source file extension how to do this “light” form of…

0 3 10 2K 0

wSAST Support @wsastsupport

2 years ago

wSAST v0.1-alpha (release date 18-12-2023) is now public! This release contains support for annotation-based rules, and support for filtering entry points when launching scans, as well as several important improvements to path finding, rule matching. github.com/wsast/docs/blo…

1 7 15 13K 6

Download Image

wSAST Support @wsastsupport

2 years ago

Development of wSAST is still actively ongoing - soon an update will be released which should substantially improve pathfinding, fix a few issues with analysis, provide new annotation-based rules for popular frameworks, reduce FPs and increase accuracy for static and df scans!

0 1 0 861 0

wSAST Support @wsastsupport

2 years ago

Following a slight hiatus in development annotation based rules are now working in the common rules engine; this should allow attributes such as Serialized or QueryParam to taint variables being traced. Further improvements underway and hope to release in a few weeks.

0 1 1 965 0

wSAST Support @wsastsupport

2 years ago

wSAST v0.1-alpha (release date 25-08-2023) is now public. This adds a basic JSP processor and includes quite a number of minor fixes and improvements to Java parsing and general analysis. Full list of changes: github.com/wsast/docs/blo… Mustache compiler call graph for eyecandy!

1 7 11 2K 2

Download Image

wSAST Support @wsastsupport

2 years ago

Apologies for the wSAST site being down today; the Azure subscription needed updated billing. It should be back now! Coming this weekend, a number of fixes and improvements to Java parsing, and JSP support.

0 1 2 945 0

wSAST Support @wsastsupport

2 years ago

Soon incoming, some further minor Java language processor fixes, and basic JSP processor enabling scanning of JSP files. Planned are annotation-based rules allowing parameters marked e.g. QueryParam or entire classes marked Serialized etc. to be sources.

0 1 0 710 0

wSAST Support @wsastsupport

2 years ago

A small update for wSAST will be released in the next few days, fixing a couple of bugs in graphing and path discovery and containing some minor improvements to Java translation.

0 0 0 110 0

Peter Winter-Smith @peterwintrsmith

2 years ago

Today I am pleased to announce the release of a code analyser I’ve been working in my free time - wSAST (wsast.co.uk) wSAST aims to make code analysis easier for application security consultants by providing tools to graph relationships, find paths between functions,…