misc formatting update

patch-1
sandeep 2021-10-25 16:03:46 +05:30
parent 51494f0055
commit a197ec8370
1 changed files with 10 additions and 7 deletions

View File

@ -4,7 +4,7 @@ info:
name: Python Scanner
author: majidmc2
severity: info
description: Scan for dangerous Python functions
description: Indicators for dangerous Python functions
reference:
- https://www.kevinlondon.com/2015/07/26/dangerous-python-functions.html
- https://www.kevinlondon.com/2015/08/15/dangerous-python-functions-pt2.html
@ -17,7 +17,8 @@ file:
extractors:
- type: regex
name: Possible Code Injection
name: code-injection
condition: or
regex:
- 'exec'
- 'eval'
@ -25,7 +26,8 @@ file:
- type: regex
name: Possible Command Injection
name: command-injection
condition: or
regex:
- 'subprocess.call\(.*shell=True.*\)'
- 'os.system'
@ -33,18 +35,19 @@ file:
- type: regex
name: Possibly Unpickling untrusted source
name: untrusted-source
condition: or
regex:
- 'pickle.loads'
- 'cPickle.loads'
- type: regex
name: Possibly loading dangerous YAMLs
name: dangerous-yaml
regex:
- 'yaml.load'
- type: regex
name: Possible SQLi
name: sqli
regex:
- 'cursor.execute'
- 'cursor.execute'