Skip to content

Latest commit

 

History

History
96 lines (67 loc) · 3.53 KB

index.rst

File metadata and controls

96 lines (67 loc) · 3.53 KB
Raw

List of Checks

General and Best Practice

.. toctree::
    :maxdepth: 1

    AST100 : Use of `assert` statement in non-test file <AST100>
    EX100 : Use of builtin `exec()` function for non-string literal <EX100>
    OS100 : Calls to `os.chmod()` with dangerous POSIX permissions <OS100>
    PIC100 : Loading serialized data with the pickle module can expose arbitrary code execution using the __reduce__ method. <PIC100>
    PR100 : Use of `shell=True` when running `subprocess.call` from the standard library <PR100>
    SQL100 : Possible SQL injection with Python string formatting <SQL100>
    TMP100 : Use of insecure `tempfile.mktemp` <TMP100>
    TMP101 : Use of hardcoded temporary file path <TMP101>
    TRY100 : Use of a `try` ... `except` block where the except block does not contain anything other than comments and a `pass` statement <TRY100>
    TRY101 : Use of a `try` ... `except` block where the except block does not contain anything other than comments and a `continue` statement <TRY101>

Passwords and Security

.. toctree::
   :maxdepth: 1

   PW100 : Matching inputs, secrets or tokens using the == operator is vulnerable to timing attacks. Use compare_digest() instead. <PW100>
   PW101 : Hardcoded passwords, secrets or keys detected <PW101>

Encryption and Hashing

.. toctree::
    :maxdepth: 1

    HL100 : MD4, MD5, SHA, and SHA1 hashing algorithms should not be used for obfuscating or protecting data <HL100>
    HL101 : MD5, SHA-1, RIPEMD-160, Whirlpool and the SHA-256 / SHA-512 hash algorithms all vulnerable to length-extension attacks and should not be used for obfuscating or protecting data <HL101>

Django Web Framework

.. toctree::
    :maxdepth: 1

    DJG100 : Setting `DEBUG = True` in a `settings.py` file (assumed Django project settings) <DJG100>
    DJG101 : Using quoted, parametrized literal will bypass Django SQL Injection protection <DJG101>
    DJG102 : Using safe strings bypasses the Django XSS protection <DJG102>
    DJG200 : Django middleware is missing `CsrfViewMiddleware`, which blocks cross-site request forgery <DJG200>
    DJG201 : Django middleware is missing `XFrameOptionsMiddleware`, which blocks clickjacking. <DJG201>

Deserialization

.. toctree::
    :maxdepth: 1

    YML100 (`pyyaml`) : Use of `yaml.load()` can cause arbitrary code execution. Suggests and has a "Quick Fix" to replace with `safe_load()` using existing arguments <YML100>

Flask Web Framework

.. toctree::
    :maxdepth: 1

    FLK100 : Use of `debug=True` when instantiating flask applications <FLK100>

SSL and Networking

.. toctree::
    :maxdepth: 1

    NET100 : Socket binding to unspecified IPv4 or IPv6 address <NET100>
    PAR100 (`paramiko`) : Host key inspection bypass using the `paramiko` SSH library <PAR100>
    RQ100 (`requests`) : Use of `verify=False` when making HTTP requests using the `requests` package <RQ100>
    RQ101 (`httpx`) : Use of `verify=False` when making HTTP requests using the `httpx` package <RQ101>

Templating Engines

.. toctree::
    :maxdepth: 1

    JJ100 (`jinja2`) : Use of Jinja2 without autoescaped input <JJ100>
    MK100 (`mako`) : Use of Mako template without escaped input <MK100>

XML

.. toctree::
    :maxdepth: 1

    XML100 : Use of standard library XML modules that are vulnerable to entity expansion DoS <XML100>
    XML200 : Use of `allow_dotted_names` with XML RPC Simple Server allows remote code execution <XML200>