cryptoAuditor
=============
A simple Python script to find crypto usages in Python source
To use: create a config file with one or more sections
Example config file:
[libs]
keywords=crypto, OpenSSL, ssl, hashlib, oauthlib, PassLib
output_file=libs.txt
process_comments=True
[funcs]
keywords=md5, sha1, sha256, sha384, sha512
process_comments=False
Note: [libs] is a special section. Keywords listed in [libs] are only matched if they are in a line with 'import'
TODO:
- Build the dictionary file with more crypto libraries and functions
- Exception handling when there is a problem with the output files
- Handle multi-line comments
- Possibly build functionality for using regex
Example usage:
python AuditCrypto.py -c cryptoConfig.txt
python AuditCrypto.py -c cryptoConfig.txt -d ./codeBase