Creating with Git, CodeQL zero to hero, and Websocket are a pain

/The Bee's Knees 🐝

The headline picks from this issue. The full issue has more.

1. /01

   Creating with Git: Launch to success - a free course on Git fundamentals offered through The Taggart Institute.

   Read : pick 1
2. /02

   CodeQL zero to hero part 1: the fundamentals of static analysis for vulnerability research

   Static analysis (static code analysis or static program analysis) is a process that allows you to analyze an application’s code for potential errors without executing the code itself. The technique can be used to perform various checks, verification, and to highlight issues in the code.

   Read : CodeQL zero to hero part 1: the fundamentals of static analysis for vulnerability research
3. /03

   Rule Writing for CodeQL and Semgrep

   One common perception is that it is easier to write rules for Semgrep than CodeQL. Spaceraccoon shares his thoughts.

   Read : Rule Writing for CodeQL and Semgrep
4. /04

   WebSockets are a Pain: A Journey in Learning and Leveraging

   Read : WebSockets are a Pain: A Journey in Learning and Leveraging
5. /05

   InsiderPhD’s Hacking Setup and How to Use It (Firefox/Burp Community)

   This is probably one of the most common question she gets asked about Bug Bounty, right next to “do you take mentors” and “how to find a bug”.

   Watch : InsiderPhD’s Hacking Setup and How to Use It (Firefox/Burp Community)