关于
Lanalyzer is a Python static taint analysis tool designed to identify potential security vulnerabilities. By tracking data flows from untrusted sources to sensitive operations, it provides detailed insights into potential risks. With customizable rules, command-line interface, and support for the Model Context Protocol (MCP), Lanalyzer offers comprehensive analysis and integration capabilities for securing Python code.
主要功能
- Taint Analysis: Tracks data flows from sources to sinks
- Customizable Rules: Define sources, sinks, sanitizers, and taint propagation paths
- Static Analysis: Analyzes code without execution
- Detailed Reports: Generates comprehensive analysis reports
- Model Context Protocol (MCP) Support: Integrates with AI tools using MCP
- 16 GitHub stars
使用案例
- Detecting SQL Injection vulnerabilities
- Identifying Cross-Site Scripting (XSS) risks
- Analyzing code for data leaks from untrusted sources
Sponsored