Static Libraries

An extremely fast Python linter and code formatter, written in Rust. Ruff aims to be orders of magnitude faster than alternative tools while integrating more functionality behind a single, common int…

An extremely fast Python linter, written in Rust. Ruff aims to be orders of magnitude faster than alternative tools while integrating more functionality behind a single, common interface. Ruff is ext…

Version: v3.6 beta Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of pe…

With Pelican, you can create web sites without worrying about databases or server-side programming. Pelican generates static sites that can be served via any web server or hosting service. You can pe…

We start by creating an empty project directory and setting up a virtual environment: Next, we teach Pyre about our new project: We are now ready to run Pyre: Pyre is licensed under the MIT license.

A security linter from PyCQA Bandit is a tool designed to find common security issues in Python code. To do this Bandit processes each file, builds an AST from it, and runs appropriate plugins agains…

Pytype checks and infers types for your Python code - without requiring type annotations. Pytype can: Pytype is a static analyzer; it does not execute the code it runs on. Thousands of projects at Go…

Flake8 is a wrapper around these tools: It also adds a few features: files that contain this line are skipped: Git and Mercurial hooks We would love to hear from you. Additionally, if you have a feat…

Integrate Webpack bundles in Django templates by using a simple template tag: In development, we can simply do: Set those extra settings inside like this: Here's a simple example of loading from an e…

Static analysis of Python web applications based on theoretical foundations (Control flow graphs, fixed point, dataflow analysis) Example usage and output: Before continuing, make sure you have pytho…

Anchore Engine is an open-source project that provides a centralized service for inspection, analysis, and certification of container images. Anchore Engine is provided as a Docker container image th…

A curated list of awesome Python security related resources.

Freezes a Flask application into a set of static files. The result can be hosted without any server-side software other than a traditional web server. Frozen-Flask uses a BSD 3-clause license. See LI…

Small security related tools created in Python and Bash for CTF players, bug bounty hunters, pentesters and developers.

We support multiple deployment models: Use Packj to audit dependencies in pull requests. The quickest way to try/test Packj is using Docker. Podman is also supported for containerized (isolated) runs…

Usually, the master branch is deployed as soon as Pull Requests are merged in the repository. However, on every Friday, I make a release and make sure the latest code is deployed. You do not need to …

Usually, the master branch is deployed as soon as Pull Requests are merged in the repository. However, on every Friday, I make a release and make sure the latest code is deployed. You do not need to…

Developers can set up a new stage into their CI pipelines to check for vulnerabilities: If security issues are found in the code, the severity, the confidence, the file, the line, and many more usefu…

“For those who like dinosaurs 🦖 and clean try/except ✨ blocks.” OR You can enable experimental analyzers by running: You can also autofix some violations: If you want to ignore a violation in a speci…

Freki is a free and open-source malware analysis platform. Freki was presented at the XXI Brazilian Symposium on Information and Computational Systems Security (SBSeg 2021). This project is licensed …

Basic script to detect vulnerabilities into a PHP source code, it is using Regular Expression to find sinkholes. Currently detecting : if you want to export each vulnerabilities type into a folder us…

Demo code and other handouts for students of our FastAPI Web Apps course. FastAPI has burst on to the Python web scene. In fact, the 2020 PSF developer survey shows FastAPI going from off the radar t…

Dlint is a tool for encouraging best coding practices and helping ensure Python code is secure. The most important thing I have done as a programmer in recent years is to aggressively pursue static c…

A plugin to run security checks for common flaws in Python code and suggest quick fixes. Check out the webinar for a full demo of the functionality in this plugin: This plugin will check the installe…

Pyanalyze is a tool for programmatically detecting common mistakes in Python code, such as references to undefined variables and type errors. It can be extended to add additional rules and perform ch…

Checks syntax of reStructuredText and code blocks nested within it. Contents From pip To use pyproject.toml for configuration: To add sphinx support: With bad Python syntax: With bad C++ syntax: With…

Dlint is a tool for encouraging best coding practices and helping ensure Python code is secure. The most important thing I have done as a programmer in recent years is to aggressively pursue static c…