Welcome to PyT’s documentation!

pyt is static analysis tool for detecting security vulnerabilities in Python3 web applications. It uses the ast module to parse Python and then performs a variant of reaching definitions to track taint from source to sink.

The main documentation for the tool is organized into a few sections:

• User Documentation
• About PyT
• Developer Documentation

User Documentation

• Getting Started
  • Install
  • Usage from Source
• PyT Features
• Frequently Asked Questions
  • Why do you not support Python2?
  • How do you deal with path explosion?
  • Do you do inlining or summaries for inter-procedural analysis?
• Support
  • Bugs & Support Issues
  • Reporting Issues

About PyT

• The Story
• Maturity
• Feature Roadmap
• Contributing
  • Contributing to development
• Development Team
  • Members
  • Joining
• Related Work
  • Related Projects
  • Related Papers
• Past Evaluations
  • November 16-17th, 2017
  • Around or before May 2016

Developer Documentation

• Virtual env setup guide
• Testing
  • Continuous Integration
• Building and Contributing to Documentation
• Architecture
  • Source code to AST
  • AST to CFG
• How It Works