@@ -63,44 +63,48 @@ Usage
6363
6464.. code-block ::
6565
66- usage: python -m pyt [-h] [-f FILEPATH] [-a ADAPTOR] [-pr PROJECT_ROOT]
67- [-b BASELINE_JSON_FILE] [-j] [-m BLACKBOX_MAPPING_FILE]
68- [-t TRIGGER_WORD_FILE] [-o OUTPUT_FILE] [-trim] [-i]
66+ usage: python -m pyt [-h] [-a ADAPTOR] [-pr PROJECT_ROOT]
67+ [-b BASELINE_JSON_FILE] [-j] [-m BLACKBOX_MAPPING_FILE]
68+ [-t TRIGGER_WORD_FILE] [-o OUTPUT_FILE] [--ignore-nosec]
69+ [-r] [-x EXCLUDED_PATHS] [-trim] [-i]
70+ targets [targets ...]
6971
7072 required arguments:
71- -f FILEPATH, --filepath FILEPATH
72- Path to the file that should be analysed.
73+ targets source file(s) or directory(s) to be tested
7374
7475 optional arguments:
7576 -a ADAPTOR, --adaptor ADAPTOR
76- Choose a web framework adaptor: Flask(Default),
77- Django, Every or Pylons
77+ Choose a web framework adaptor: Flask(Default),
78+ Django, Every or Pylons
7879 -pr PROJECT_ROOT, --project-root PROJECT_ROOT
79- Add project root, only important when the entry file
80- is not at the root of the project.
80+ Add project root, only important when the entry file
81+ is not at the root of the project.
8182 -b BASELINE_JSON_FILE, --baseline BASELINE_JSON_FILE
82- Path of a baseline report to compare against (only
83- JSON-formatted files are accepted)
83+ Path of a baseline report to compare against (only
84+ JSON-formatted files are accepted)
8485 -j, --json Prints JSON instead of report.
8586 -m BLACKBOX_MAPPING_FILE, --blackbox-mapping-file BLACKBOX_MAPPING_FILE
86- Input blackbox mapping file.
87+ Input blackbox mapping file.
8788 -t TRIGGER_WORD_FILE, --trigger-word-file TRIGGER_WORD_FILE
88- Input file with a list of sources and sinks
89+ Input file with a list of sources and sinks
8990 -o OUTPUT_FILE, --output OUTPUT_FILE
90- write report to filename
91+ write report to filename
9192 --ignore-nosec do not skip lines with # nosec comments
93+ -r, --recursive find and process files in subdirectories
94+ -x EXCLUDED_PATHS, --exclude EXCLUDED_PATHS
95+ Separate files with commas
9296
9397 print arguments:
9498 -trim, --trim-reassigned-in
95- Trims the reassigned list to just the vulnerability
96- chain.
99+ Trims the reassigned list to just the vulnerability
100+ chain.
97101 -i, --interactive Will ask you about each blackbox function call in
98- vulnerability chains.
102+ vulnerability chains.
99103
100104 Usage from Source
101105=================
102106
103- Using it like a user ``python3 -m pyt -f example /vulnerable_code/XSS_call.py save -du ``
107+ Using it like a user ``python3 -m pyt examples /vulnerable_code/XSS_call.py ``
104108
105109Running the tests ``python3 -m tests ``
106110
0 commit comments