Static analysis of Python web applications based on theoretical foundations (Control flow graphs, fixed point, dataflow analysis) Detect command injection, SSRF, SQL injection, XSS, directory traveral etc. A lot of customization is possible. For functions from builtins or libraries, e.g. url_for or os.path.join, use the -m option to specify whether or not they return tainted values given tainted inputs, by default this file is used.

Features

  • Virtual env setup guide
  • Detect command injection, SSRF, SQL injection, XSS, directory traveral etc.
  • A lot of customization possible
  • A Static Analysis Tool for Detecting Security Vulnerabilities
  • Detect vulnerabilities in Python Web Applications
  • Static analysis of Python web applications based on theoretical foundations

Project Samples

Python Taint Screenshot 1

Project Activity

See All Activity >

Categories

Frameworks, Web Development

License

GNU General Public License version 3.0 (GPLv3)

Follow Python Taint

Python Taint Web Site

Other Useful Business Software
Auth0 B2B Essentials: SSO, MFA, and RBAC Built In Icon
Auth0 B2B Essentials: SSO, MFA, and RBAC Built In

Unlimited organizations, 3 enterprise SSO connections, role-based access control, and pro MFA included. Dev and prod tenants out of the box.

Auth0's B2B Essentials plan gives you everything you need to ship secure multi-tenant apps. Unlimited orgs, enterprise SSO, RBAC, audit log streaming, and higher auth and API limits included. Add on M2M tokens, enterprise MFA, or additional SSO connections as you scale.
Sign Up Free
Rate This Project
Login To Rate This Project

User Reviews

Be the first to post a review of Python Taint!

Additional Project Details

Programming Language

Python

Related Categories

Python Frameworks, Python Web Development Software

Registered

2022-11-09
Report inappropriate content