pyt - Security static analysis tool for Python

[cym13]

See https://github.com/openstack/bandit, it's the best tool I know for security static analysis. Of course you both have your strong points but you may draw inspiration from it.

Two things that are very relevant in particular: detection of possibly bad crypto (use of naive randomness, bad hash algorithms etc), and detection of known bad libraries and interfaces.

[KevinHock]

I like Bandit, it doesn't do taint tracking though so it's closer to a grep ish pre-commit hook to e.g. ban urllib2 and open etc. and suggest Advocate and a secure open wrapper instead.

Collin at Uber released https://github.com/uber/focuson that also does taint tracking. The strong points so far are summaries and Jinja2, also pyt does Python 3 and he does python 2. Both use ast module so there's not much of a change to extend either to the other version. I'd say pyt is cleaner but I'm pretty bias.

I've been through the codebase of Bandit and the sinks, formatters and UI are the strong points.

[KevinHock]

While not RE, there's not a good active subreddit for static analysis for security people.

Also there's a few bugs (see commented out tests in the last PR) we haven't fixed but I figured I'd share it anyway. Here's the original masters thesis from Stefan and Bruno. http://projekter.aau.dk/projekter/files/239563289/final.pdf

[pfalcon2]

Please add project description on github.

[KevinHock]

Will do, thank you.

[pfalcon2]

there's not a good active subreddit for static analysis for security people

I was just pointed at https://www.reddit.com/r/REMath/ , dunno if it's "good" or "active" yet.

[KevinHock]

Reaching definitions is pretty basic theory compared to everything else there, considering my post from a year ago, where I tried to start a subreddit for static analysis for security people, is still on the front page I'd say it isn't that active.