/tags/codeql/Recent content in CodeQL on THALIUMHugoen-usCopyright (c) 2026, all rights reserved.Fri, 13 Nov 2026 08:00:00 +0000/posts/binql-a-codeql-extension-for-binary-formats/Fri, 13 Nov 2026 08:00:00 +0000/posts/binql-a-codeql-extension-for-binary-formats/<p>Once a vulnerability is found, its variants are rarely far behind, and finding them is tedious, repetitive work. CodeQL solved this for source code by making a codebase queryable. No equivalent existed for the binaries reverse engineers actually work on.</p> <p>This post details the reverse engineering of CodeQL&rsquo;s undocumented components, its extractors and proprietary formats, and their reimplementation for binaries in <strong>BinQL</strong>, a tool that makes CodeQL as effective on compiled code as on C/C++, whether to hunt variants, track a bug across versions, or shortlist exploit candidates.</p>