用 Jev 与 CodeGraph 组合做安全审查
开发者分享了 typesafe-security-review 项目:把 Jev 的概率判断与代码图、OWASP/CWE 信息结合,用于低成本安全扫描。
作者分享用 Jev 做 offsec 实验的 POC:在 Mythic 中实时评分命令 opsec 并识别表达式类型,认为其速度和极低成本带来新思路,但网络攻防能力尚不成熟。
Playing around with Jev to see how it performs with offsec. Its speed and insane low cost certainly opens up novel concepts, like this POC doing real-time scoring of command opsec in Mythic, and identifying the expression type. It's not great at cyber yet, but exciting to see!