Skip to content

Commit 5660b51

Browse files
committed
docs: Updates repository content description
Refines the project description to include pollution probing tools. Clarifies the location of these tools within the repository to improve navigation for users.
1 parent 7c5e826 commit 5660b51

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@
44

55
<h2 align="center"> Python Class Pollution </h2>
66

7-
This repository contains **Pyrl** (/pɜːrl/, "Pearl"), an automated detection tool for Python class pollution, together with the datasets, vulnerability collection, supporting scripts, and the source of the project website.
7+
This repository contains **Pyrl** (/pɜːrl/, "Pearl"), an automated detection tool for Python class pollution, together with the datasets, pollution probing tools (lib/polluter), and the source of the project website.
88

99
Python class pollution is a vulnerability class where untrusted input modifies unintended Python runtime objects via reflective attribute or item lookups. Successful exploitation can lead to RCE, authentication bypass, XSS, DoS, and token leakage. See the [project site](https://class-pollution.github.io) and the [wiki](https://class-pollution.github.io/wiki/docs/) for the taxonomy, targets, gadgets, and showcases.
1010

0 commit comments

Comments
 (0)