pyt icon indicating copy to clipboard operation
pyt copied to clipboard

A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications

Results 27 pyt issues
Sort by recently updated
recently updated
newest added

Excuse me, why is there no argument in the variable args in the picture below? ![image](https://user-images.githubusercontent.com/49243003/113498367-e6f10c00-953e-11eb-9da1-348fbd48d814.png) `cmd_result = subprocess.Popen(cmd,shell=True, stdout=subprocess.PIPE, stderr=subprocess.STDOUT, stdin=subprocess.DEVNULL).stdout.read()` Sorry, I'm not a native speaker. I hope...

``` Traceback (most recent call last): File "c:\users\matth\appdata\local\programs\python\python38\lib\runpy.py", line 193, in _run_module_as_main return _run_code(code, main_globals, None, File "c:\users\matth\appdata\local\programs\python\python38\lib\runpy.py", line 86, in _run_code exec(code, run_globals) File "C:\Users\matth\.local\bin\pyt.exe\__main__.py", line 7, in File...

There is a small typo in README.rst. Should read `traversal` rather than `traveral`. Semi-automated pull request generated by https://github.com/timgates42/meticulous/blob/master/docs/NOTE.md

Looks like pyt took a dependency on a private attribute that has disappeared. Yes. I saw the tool is no longer maintained, but it used to at least run on...

python-taint==0.42 python 3.7 File a/sys.py ```python from sys import path print(path) ``` ```sh % python3 ./a/sys.py ['/home/user/a', '/usr/lib64/python37.zip', '/usr/lib64/python3.7', '/usr/lib64/python3.7/lib-dynload', '/usr/lib64/python3.7/site-packages', '/usr/lib/python3.7/site-packages'] ``` ```sh % ./.tox/pyt/bin/pyt -v -v -v -v...

So I run `python -m pyt -a E -f example/django.nV/taskManager/upload_controller.py -trim` and out I get: ```python 5 vulnerabilities found: Vulnerability 1: File: example/django.nV/taskManager/misc.py > User input at line 24, trigger...

difficult
epic

Hi, I am trying pyt to work through callbacks. It taints the function arguments but not callbacks. If anyone has any idea about this , please let me know.

Since in Python functions are values, we can assign any function to any variable. This also applies to sources and sinks. At the moment, we rely on the sources and...

When there are two modules that expose a function with the same name, and those get imported directly (using aliases), the control flow is resolved incorrectly. Example: `module_a.py` ```python def...