joern

Project Overview

Joern is a platform for analyzing source code, bytecode, and binary executables. It generates code property graphs (CPGs), a graph representation of code for cross-language code analysis. Code property graphs are stored in a custom graph database, allowing code to be mined using search queries formulated in a Scala-based domain-specific query language. Joern is developed with the goal of providing a useful tool for vulnerability discovery and research in static program analysis.

Key Features

• Supports C/C++, Java, JavaScript, Python, Kotlin, and more
• Generates code property graphs (CPGs)
• Scala-based domain-specific query language
• Analyzes source code, bytecode, and binary executables
• Designed for vulnerability discovery and static analysis research

Target Audience

• Security researchers and bug hunters
• Static program analysis researchers and developers
• Engineers interested in code graph analysis

Quick Start

1. Requires JDK 21
2. Run the installation script:

   wget https://github.com/joernio/joern/releases/latest/download/joern-install.sh
   chmod +x ./joern-install.sh
   sudo ./joern-install.sh

3. Start Joern: type joern to enter the interactive shell

Core Advantages

• Cross-language code analysis based on code property graphs
• Powerful query language for complex analysis
• Open-source, free, and community-driven

System Requirements

• OS: Cross-platform
• Additional Dependencies: JDK 21