gbleaney

4 ms·

1. 1.▲
   by gbleaney 6y ago

   Pysa can find any bug that you can model as a flow of data from one place to another. That includes your standard web app bugs like SQLi, RCE, etc., also some AuthN/AuthZ bugs depending on how you do your checks. Concretely, this is a
2. 2.▲
   by gbleaney 6y ago

   In addition to what Sinan said, we've had success running on fully untyped codebases. These are you some strategies that you can use to get results on untyped codebases: https://pyre-check.org/docs/pysa-coverage.ht
3. 3.▲
   Breaking the Bank – Developing an Exploit for Venmo Money and Credential Theft(bleaney.ca)

   1 points by gbleaney 11y ago|0 comments
4. 4.▲
   Developing an account takeover worm for Pixelapse (recent Dropbox acquisition)(bleaney.ca)

   1 points by gbleaney 12y ago|0 comments