Description:

DependencyConfusion 666

DependencyConfusion
Description
This package implements a test for Dependency Confusion using pip.

The version 0.0.2 is available on test.pypi.org.
The version 0.0.2 and 666 are available on pypi.org.
In the scenario you want to install version 0.0.2 available on test.pypi.org and you use the pip --extra-index-url option to install it.
During installation, a window will open to tell you which version is being installed... theoretically version 666 available on pypi.org will be installed if your pip version is vulnerable to dependency confusion.

Requirements
This package require:

python3
python3 Standard Library

Installation
pip install --extra-index-url https://test.pypi.org/simple/ DependencyConfusion

Links

Github Page
Pypi package
Test pypi package

Licence
Licensed under the GPL, version 3.

License

For personal and professional use. You cannot resell or redistribute these repositories in their original state.

Share

• Share on Facebook
• Share on Twitter