Learning source code review, spot vulnerability, find some ways how to fix it.
This is just my note to learn source code review and how to make the exploit. Let me know if I do anything wrong, your feedback is always welcome.
05 August 2021
PyAnnotate: Auto-generate PEP-484 annotations Insert annotations into your source code based on call arguments and return types observed at runtime. F
pymwp: MWP analysis in Python pymwp is a tool for automatically performing static analysis on programs written in C, inspired by "A Flow Calculus of m
Look for the bare necessities, the simple bare necessities. Forget about your worries and your strife. — The Jungle Book.
Overview Metrinome is an all-purpose tool for working with code complexity metrics. It can be used as both a REPL and API, and includes: Converters to
MonkeyType MonkeyType collects runtime types of function arguments and return values, and can automatically generate stub files or even add draft type
pyanalyze Pyanalyze is a tool for programmatically detecting common mistakes in Python code, such as references to undefined variables and some catego
"Always code as if the guy who ends up maintaining your code will be a violent psychopath who knows where you live." ― John F. Woods coala provides a
Notes from 2017 This is an older project which I am no longer working on. It was built before ES6 existed and before Python 3 had much usage. While it
Vulture - Find dead code Vulture finds unused code in Python programs. This is useful for cleaning up and finding errors in large code bases. If you r
pytype - ? ✔ Pytype checks and infers types for your Python code - without requiring type annotations. Pytype can: Lint plain Python code, flagging c
Pyre is a performant type checker for Python compliant with PEP 484. Pyre can analyze codebases with millions of lines of code incrementally – providi
Read Latest Documentation - Browse GitHub Code Repository isort your imports, so you don't have to. isort is a Python utility / library to sort import
This is a Python program to get the source lines of code (SLOC) count for a given GitHub repository.
ticktock is a minimalist library to profile Python code: it periodically displays timing of running code.
YAPF Introduction Most of the current formatters for Python --- e.g., autopep8, and pep8ify --- are made to remove lint errors from code. This has som
Checkov - Prevent cloud misconfigurations during build-time for Terraform, Cloudformation, Kubernetes, Serverless framework and other infrastructure-as-code-languages with Checkov by Bridgecrew.
fixup: Automatically add and remove python import statements The goal is that running fixup my_file.py will automatically add or remove import stateme
CHex A bytecode vm written in python. hex command meaning note: the first two hex values of a CHex program are the magic number 0x01 (offset in memory
Pylama Code audit tool for Python and JavaScript. Pylama wraps these tools: pycodestyle (formerly pep8) © 2012-2013, Florent Xicluna; pydocstyle (form
CrossHair An analysis tool for Python that blurs the line between testing and type systems. THE LATEST NEWS: Check out the new crosshair cover command
1.4k Dec 26, 2022
2 Dec 02, 2022
1.4k Dec 29, 2022
26 Dec 26, 2022
4.1k Jan 02, 2023
212 Jan 07, 2023
3.4k Jan 02, 2023
3k Jan 09, 2023
2.4k Jan 03, 2023
4k Dec 31, 2022
6.2k Jan 07, 2023
5.5k Jan 06, 2023
2 Mar 10, 2022
30 Sep 28, 2022
5.1k Jan 03, 2023
2 May 08, 2022
1 Aug 26, 2022
966 Dec 29, 2022
836 Jan 08, 2023