Python – mpettersson

This page contains basic beginner and more advanced Python snippets. The purpose of this page is two fold; a reference for those who are learning and like to learn via pure code, as well as, a location for mpettersson to keep snippets and Python related links. This pages subsections are:

Python 101
Miscellaneous Python Classes & Code
Python Resources

As always, please contact us with comments, concerns, questions, etc. about Python!

Python 101

Python downloads for Windows can be found on the Python Releases for Windows page, similarly, downloads of Python for Mac are on the Python Releases for Mac OS X page, and the catch all, or general Python download page is at www.python.org/downloads/. There are two major versions of Python, where “Python 2.x is legacy, Python 3.x is the present and future of the language”. For Python documentation, such as tutorials, visit Python’s documentation page. For an Integrated Development Environment (IDE) checkout either Eclipse or NetBeans, and refer to the Python IDE wiki for compatibility and Python specific plugins.

Keywords

and	as	assert	break	class	continue
def	del	elif	else	except	exec
finally	for	from	global	if	import
in	is	lambda	not	or	pass
print	raise	return	try	while	with
yield

Please note that the following snippets, Python 101 and Python 101 Continued, are the code and none of the extra fluff of the tutorials that can be found in Python 2.7.9 Documentation for The Python Tutorial.

# this is the first comment

spam = 1  # and this is the second comment
          # ... and now a third!

text = "# This is not a comment because it's inside quotes."

# this is the first comment

spam = 1 # and this is the second comment

# ... and now a third!

text = "# This is not a comment because it's inside quotes."

NOTE: In the following code snippets, a ‘>>>’ indicates the Python interpreter prompt.

>>>###########
>>># NUMBERS #
>>>###########
>>> 2 + 2
4
>>> 50 - 5*6
20
>>> (50 - 5.0*6) / 4
5.0
>>> 8 / 5.0
1.6
>>> 17 / 3  # int / int -> int
5
>>> 17 / 3.0  # int / float -> float
5.666666666666667
>>> 17 // 3.0  # explicit floor division discards the fractional part
5.0
>>> 17 % 3  # the % operator returns the remainder of the division
2
>>> 5 * 3 + 2  # result * divisor + remainder
17
>>> 5 ** 2  # 5 squared
25
>>> 2 ** 7  # 2 to the power of 7
128
>>> width = 20
>>> height = 5 * 9
>>> width * height
900
>>> n  # try to access an undefined variable
Traceback (most recent call last):
  File "<stdin>", line 1, in <module>
NameError: name 'n' is not defined
>>> 3 * 3.75 / 1.5
7.5
>>> 7.0 / 2
3.5
>>> tax = 12.5 / 100
>>> price = 100.50
>>> price * tax
12.5625
>>> price + _
113.0625
>>> round(_, 2)
113.06
>>>###########
>>># STRINGS #
>>>###########
>>> 'spam eggs'  # single quotes
'spam eggs'
>>> 'doesn\'t'  # use \' to escape the single quote...
"doesn't"
>>> "doesn't"  # ...or use double quotes instead
"doesn't"
>>> '"Yes," he said.'
'"Yes," he said.'
>>> "\"Yes,\" he said."
'"Yes," he said.'
>>> '"Isn\'t," she said.'
'"Isn\'t," she said.'
>>> '"Isn\'t," she said.'
'"Isn\'t," she said.'
>>> print '"Isn\'t," she said.'
"Isn't," she said.
>>> s = 'First line.\nSecond line.'  # \n means newline
>>> s  # without print, \n is included in the output
'First line.\nSecond line.'
>>> print s  # with print, \n produces a new line
First line.
Second line.
>>> print 'C:\some\name'  # here \n means newline!
C:\some
ame
>>> print r'C:\some\name'  # note the r before the quote
C:\some\name
print """\
Usage: thingy [OPTIONS]
     -h                        Display this usage message
     -H hostname               Hostname to connect to
"""
Usage: thingy [OPTIONS]
     -h                        Display this usage message
     -H hostname               Hostname to connect to
>>> # 3 times 'un', followed by 'ium'
>>> 3 * 'un' + 'ium'
'unununium'
>>> 'Py' 'thon' # two more more string literals next to each other are automatically concatenated together. 
'Python'
>>> prefix = 'Py'
>>> prefix 'thon'  # can't concatenate a variable and a string literal
  ...
SyntaxError: invalid syntax
>>> ('un' * 3) 'ium'
  ...
SyntaxError: invalid syntax
>>> prefix + 'thon'
'Python'
>>> text = ('Put several strings within parentheses '
            'to have them joined together.')
>>> text
'Put several strings within parentheses to have them joined together.'
>>> word = 'Python'
>>> word[0]  # character in position 0
'P'
>>> word[5]  # character in position 5
'n'
>>> word[-1]  # last character
'n'
>>> word[-2]  # second-last character
'o'
>>> word[-6]
'P'
>>> word[0:2]  # characters from position 0 (included) to 2 (excluded)
'Py'
>>> word[2:5]  # characters from position 2 (included) to 5 (excluded)
'tho'
>>> word[:2] + word[2:]
'Python'
>>> word[:4] + word[4:]
'Python'
>>> word[:2]  # character from the beginning to position 2 (excluded)
'Py'
>>> word[4:]  # characters from position 4 (included) to the end
'on'
>>> word[-2:] # characters from the second-last (included) to the end
'on'
>>> word[4:42]
'on'
>>> word[42:]
''
>>> # Strings are immutable!!!
>>> word[0] = 'J' 
  ...
TypeError: 'str' object does not support item assignment
>>> word[2:] = 'py'
  ...
TypeError: 'str' object does not support item assignment
>>> 'J' + word[1:]
'Jython'
>>> word[:2] + 'py'
'Pypy'
>>> s = 'supercalifragilisticexpialidocious'
>>> len(s)
34
>>> # Unicode Strings
>>> u'Hello World !'
u'Hello World !'
>>> u'Hello\u0020World !'
u'Hello World !'
>>> ur'Hello\u0020World !'
u'Hello World !'
>>> ur'Hello\\u0020World !'
u'Hello\\\\u0020World !'
>>> u"abc"
u'abc'
>>> str(u"abc")
'abc'
>>> u"äöü"
u'\xe4\xf6\xfc'
>>> str(u"äöü")
Traceback (most recent call last):
  File "<stdin>", line 1, in ?
UnicodeEncodeError: 'ascii' codec can't encode characters in position 0-2: ordinal not in range(128)
>>> u"äöü".encode('utf-8')
'\xc3\xa4\xc3\xb6\xc3\xbc'
>>> unicode('\xc3\xa4\xc3\xb6\xc3\xbc', 'utf-8')
u'\xe4\xf6\xfc'
>>> #########
>>> # LISTS #
>>> #########
>>> squares = [1, 4, 9, 16, 25]
>>> squares
[1, 4, 9, 16, 25]
>>> squares[0]  # indexing returns the item
1
>>> squares[-1]
25
>>> squares[-3:]  # slicing returns a new list
[9, 16, 25]
>>> squares[:]
[1, 4, 9, 16, 25]
>>> squares + [36, 49, 64, 81, 100]
[1, 4, 9, 16, 25, 36, 49, 64, 81, 100]
>>> cubes = [1, 8, 27, 65, 125]  # something's wrong here
>>> 4 ** 3  # the cube of 4 is 64, not 65!
64
>>> cubes[3] = 64  # replace the wrong value
>>> cubes
[1, 8, 27, 64, 125]
>>> cubes.append(216)  # add the cube of 6
>>> cubes.append(7 ** 3)  # and the cube of 7
>>> cubes
[1, 8, 27, 64, 125, 216, 343]
>>> letters = ['a', 'b', 'c', 'd', 'e', 'f', 'g']
>>> letters
['a', 'b', 'c', 'd', 'e', 'f', 'g']
>>> # replace some values
>>> letters[2:5] = ['C', 'D', 'E']
>>> letters
['a', 'b', 'C', 'D', 'E', 'f', 'g']
>>> # now remove them
>>> letters[2:5] = []
>>> letters
['a', 'b', 'f', 'g']
>>> # clear the list by replacing all the elements with an empty list
>>> letters[:] = []
>>> letters
[]
>>> letters = ['a', 'b', 'c', 'd']
>>> len(letters)
4
>>> a = ['a', 'b', 'c']
>>> n = [1, 2, 3]
>>> x = [a, n]
>>> x
[['a', 'b', 'c'], [1, 2, 3]]
>>> x[0]
['a', 'b', 'c']
>>> x[0][1]
'b'

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

144

145

146

147

148

149

150

151

152

153

154

155

156

157

158

159

160

161

162

163

164

165

166

167

168

169

170

171

172

173

174

175

176

177

178

179

180

181

182

183

184

185

186

187

188

189

190

191

192

193

194

195

196

197

198

199

200

201

202

203

204

205

206

207

208

209

210

211

212

213

214

215

216

217

218

219

220

>>>###########

>>># NUMBERS #

>>>###########

>>> 2 + 2

>>> 50 - 5*6

>>> (50 - 5.0*6) / 4

5.0

>>> 8 / 5.0

1.6

>>> 17 / 3 # int / int -> int

>>> 17 / 3.0 # int / float -> float

5.666666666666667

>>> 17 // 3.0 # explicit floor division discards the fractional part

5.0

>>> 17 % 3 # the % operator returns the remainder of the division

>>> 5 * 3 + 2 # result * divisor + remainder

>>> 5 ** 2 # 5 squared

>>> 2 ** 7 # 2 to the power of 7

128

>>> width = 20

>>> height = 5 * 9

>>> width * height

900

>>> n # try to access an undefined variable

Traceback (most recent call last):

File "<stdin>", line 1, in <module>

NameError: name 'n' is not defined

>>> 3 * 3.75 / 1.5

7.5

>>> 7.0 / 2

3.5

>>> tax = 12.5 / 100

>>> price = 100.50

>>> price * tax

12.5625

>>> price + _

113.0625

>>> round(_, 2)

113.06

>>>###########

>>># STRINGS #

>>>###########

>>> 'spam eggs' # single quotes

'spam eggs'

>>> 'doesn\'t' # use \' to escape the single quote...

"doesn't"

>>> "doesn't" # ...or use double quotes instead

"doesn't"

>>> '"Yes," he said.'

'"Yes," he said.'

>>> "\"Yes,\" he said."

'"Yes," he said.'

>>> '"Isn\'t," she said.'

'"Isn\'t," she said.'

>>> '"Isn\'t," she said.'

'"Isn\'t," she said.'

>>> print '"Isn\'t," she said.'

"Isn't," she said.

>>> s = 'First line.\nSecond line.' # \n means newline

>>> s # without print, \n is included in the output

'First line.\nSecond line.'

>>> print s # with print, \n produces a new line

First line.

Second line.

>>> print 'C:\some\name' # here \n means newline!

C:\some

ame

>>> print r'C:\some\name' # note the r before the quote

C:\some\name

print """\

Usage: thingy [OPTIONS]

-h Display this usage message

-H hostname Hostname to connect to

"""

Usage: thingy [OPTIONS]

-h Display this usage message

-H hostname Hostname to connect to

>>> # 3 times 'un', followed by 'ium'

>>> 3 * 'un' + 'ium'

'unununium'

>>> 'Py' 'thon' # two more more string literals next to each other are automatically concatenated together.

'Python'

>>> prefix = 'Py'

>>> prefix 'thon' # can't concatenate a variable and a string literal

...

SyntaxError: invalid syntax

>>> ('un' * 3) 'ium'

...

SyntaxError: invalid syntax

>>> prefix + 'thon'

'Python'

>>> text = ('Put several strings within parentheses '

'to have them joined together.')

>>> text

'Put several strings within parentheses to have them joined together.'

>>> word = 'Python'

>>> word[0] # character in position 0

'P'

>>> word[5] # character in position 5

'n'

>>> word[-1] # last character

'n'

>>> word[-2] # second-last character

'o'

>>> word[-6]

'P'

>>> word[0:2] # characters from position 0 (included) to 2 (excluded)

'Py'

>>> word[2:5] # characters from position 2 (included) to 5 (excluded)

'tho'

>>> word[:2] + word[2:]

'Python'

>>> word[:4] + word[4:]

'Python'

>>> word[:2] # character from the beginning to position 2 (excluded)

'Py'

>>> word[4:] # characters from position 4 (included) to the end

'on'

>>> word[-2:] # characters from the second-last (included) to the end

'on'

>>> word[4:42]

'on'

>>> word[42:]

>>> # Strings are immutable!!!

>>> word[0] = 'J'

...

TypeError: 'str' object does not support item assignment

>>> word[2:] = 'py'

...

TypeError: 'str' object does not support item assignment

>>> 'J' + word[1:]

'Jython'

>>> word[:2] + 'py'

'Pypy'

>>> s = 'supercalifragilisticexpialidocious'

>>> len(s)

>>> # Unicode Strings

>>> u'Hello World !'

u'Hello World !'

>>> u'Hello\u0020World !'

u'Hello World !'

>>> ur'Hello\u0020World !'

u'Hello World !'

>>> ur'Hello\\u0020World !'

u'Hello\\\\u0020World !'

>>> u"abc"

u'abc'

>>> str(u"abc")

'abc'

>>> u"äöü"

u'\xe4\xf6\xfc'

>>> str(u"äöü")

Traceback (most recent call last):

File "<stdin>", line 1, in ?

UnicodeEncodeError: 'ascii' codec can't encode characters in position 0-2: ordinal not in range(128)

>>> u"äöü".encode('utf-8')

'\xc3\xa4\xc3\xb6\xc3\xbc'

>>> unicode('\xc3\xa4\xc3\xb6\xc3\xbc', 'utf-8')

u'\xe4\xf6\xfc'

>>> #########

>>> # LISTS #

>>> #########

>>> squares = [1, 4, 9, 16, 25]

>>> squares

[1, 4, 9, 16, 25]

>>> squares[0] # indexing returns the item

>>> squares[-1]

>>> squares[-3:] # slicing returns a new list

[9, 16, 25]

>>> squares[:]

[1, 4, 9, 16, 25]

>>> squares + [36, 49, 64, 81, 100]

[1, 4, 9, 16, 25, 36, 49, 64, 81, 100]

>>> cubes = [1, 8, 27, 65, 125] # something's wrong here

>>> 4 ** 3 # the cube of 4 is 64, not 65!

>>> cubes[3] = 64 # replace the wrong value

>>> cubes

[1, 8, 27, 64, 125]

>>> cubes.append(216) # add the cube of 6

>>> cubes.append(7 ** 3) # and the cube of 7

>>> cubes

[1, 8, 27, 64, 125, 216, 343]

>>> letters = ['a', 'b', 'c', 'd', 'e', 'f', 'g']

>>> letters

['a', 'b', 'c', 'd', 'e', 'f', 'g']

>>> # replace some values

>>> letters[2:5] = ['C', 'D', 'E']

>>> letters

['a', 'b', 'C', 'D', 'E', 'f', 'g']

>>> # now remove them

>>> letters[2:5] = []

>>> letters

['a', 'b', 'f', 'g']

>>> # clear the list by replacing all the elements with an empty list

>>> letters[:] = []

>>> letters

[]

>>> letters = ['a', 'b', 'c', 'd']

>>> len(letters)

>>> a = ['a', 'b', 'c']

>>> n = [1, 2, 3]

>>> x = [a, n]

>>> x

[['a', 'b', 'c'], [1, 2, 3]]

>>> x[0]

['a', 'b', 'c']

>>> x[0][1]

'b'

Miscellaneous Python Code

This section contains random Python snippets.

# More advanced code here.

1	# More advanced code here.

The following (two) scripts were created when investigating web security vulnerabilities; we wanted to get some information out of the CVE list and (of course) we didn’t want to manually parse them… This is what Python is made for!

import string, csv, sys, re, xml.etree.ElementTree as ET

def main(xmlFile, writer):
	print('Processing file: \'' + str(xmlFile) + '\'')
	tree = ET.parse(xmlFile)
	root = tree.getroot()
	exclude = set(string.punctuation)
	cveFileList = []
	cveOnlyList = []
	cveNewList = []
	totalCVE = 0
	# Keyword list, used to parse the description and create a Flash-only set of CVEs
	whiteList = ['flash', 'actionscript', 'avm', ' air ', 'adobe', 'macromedia', 'swf', 'shockwave', '.as ', 'flv', 'f4v', 'fxg', 'mxml', 'swc', 'avm2', 'avm3', 'externalinterface']
	blackList = ['adobe reader', 'coldfusion', 'acrobat', 'flashback', 'livecycle', 'adobe audition', 'photoshop', 'dreamweaver', 'captivate', 'cs3', 'cs4', 'cs5', 'cs6', 'cs7', 'smoothflash', 'php']
	try:
		print("Total CVEs: " + str(len(root)))
		for counter in range(len(root)):
			checker = False
			name = "TODO"
			cveID = "TODO"
			datePub = "TODO"
			dateModified = "TODO"
			cvssAccessVector = "TODO"
			cvssAccessComplexity = "TODO"
			cvssAuth = "TODO"
			cvssConfImpact = "TODO"
			cvssIntegrityImpact = "TODO"
			cvssAvailabilityImpact = "TODO"
			cvssSource = "TODO"
			cvssDateTime = "TODO"
			cweID = "TODO"
			summary = "TODO"
			name = root[counter].get('id')
			description = (root[counter][((len(root[counter]))-1)].text).lower()
			desc = ''.join(ch for ch in description if ch not in exclude)
			for x in range(len(root[counter])):
				subEle = (root[counter][x].tag)
				if subEle.endswith(('cve-id')):
					cveID = root[counter][x].text
					if cveID != name:
						print('The Name does not match the CVE number!')
						sys.exit(1)
				elif subEle.endswith(('published-datetime')):
					datePub = root[counter][x].text
				elif subEle.endswith(('last-modified-datetime')):
					dateModified = root[counter][x].text
				elif subEle.endswith(('cvss')):
					cvssScore = root[counter][x][0][0].text
					cvssAccessVector = root[counter][x][0][1].text
					cvssAccessComplexity = root[counter][x][0][2].text
					cvssAuth = root[counter][x][0][3].text
					cvssConfImpact = root[counter][x][0][4].text
					cvssIntegrityImpact = root[counter][x][0][5].text
					cvssAvailabilityImpact = root[counter][x][0][6].text
					cvssDateTime = root[counter][x][0][8].text
				elif subEle.endswith(('cwe')):
					cweID = root[counter][x].get('id')
				elif subEle.endswith(('summary')):
					summary = root[counter][x].text
					summary = summary.replace(',', '')
				for i in (range(len(whiteList))):
					if (whiteList[i] in desc):
						checker = True
				if checker:
					for i in (range(len(blackList))):
						if  (blackList[i] in desc):
							checker = False
			if checker:
				writer.writerow( (name, datePub, dateModified, cvssScore, cvssAccessVector, cvssAccessComplexity, cvssAuth, cvssConfImpact, cvssIntegrityImpact, cvssAvailabilityImpact, cvssDateTime, cweID, summary) )
				totalCVE += 1
		print("Relevant CVEs:  " + str(totalCVE) + '\n')
	finally:
		return totalCVE

def usage():
	print('\nUSAGE: \'python NVDCVEv2ParserCSV.py <nvdcve1.xml> ... <vndcveN.xml>\', \n\twhere <nvdcve#.xml> is a vesion 2 NVD CVE XML file.\n')
	print('OUTPUT: A \'out.csv\' file containing all of the Flash relevant CVEs from the input files.\n')
	sys.exit(1)

if __name__ == '__main__':
	totalArgs = len(sys.argv)
	totalCVEs = 0
	if totalArgs < 2:
		usage()
	fw = open('out.csv', 'wb')
	try:
		print('')
		writer = csv.writer(fw)
		for i in range(1,totalArgs):
			totalCVEs += main(sys.argv[i], writer)
	finally:
		print('Total CVEs written to \'out.csv\': ' + str(totalCVEs) + '\n')
		fw.close()

import string, csv, sys, re, xml.etree.ElementTree as ET

def main(xmlFile, writer):

print('Processing file: \'' + str(xmlFile) + '\'')

tree = ET.parse(xmlFile)

root = tree.getroot()

exclude = set(string.punctuation)

cveFileList = []

cveOnlyList = []

cveNewList = []

totalCVE = 0

# Keyword list, used to parse the description and create a Flash-only set of CVEs

whiteList = ['flash', 'actionscript', 'avm', ' air ', 'adobe', 'macromedia', 'swf', 'shockwave', '.as ', 'flv', 'f4v', 'fxg', 'mxml', 'swc', 'avm2', 'avm3', 'externalinterface']

blackList = ['adobe reader', 'coldfusion', 'acrobat', 'flashback', 'livecycle', 'adobe audition', 'photoshop', 'dreamweaver', 'captivate', 'cs3', 'cs4', 'cs5', 'cs6', 'cs7', 'smoothflash', 'php']

try:

print("Total CVEs: " + str(len(root)))

for counter in range(len(root)):

checker = False

name = "TODO"

cveID = "TODO"

datePub = "TODO"

dateModified = "TODO"

cvssAccessVector = "TODO"

cvssAccessComplexity = "TODO"

cvssAuth = "TODO"

cvssConfImpact = "TODO"

cvssIntegrityImpact = "TODO"

cvssAvailabilityImpact = "TODO"

cvssSource = "TODO"

cvssDateTime = "TODO"

cweID = "TODO"

summary = "TODO"

name = root[counter].get('id')

description = (root[counter][((len(root[counter]))-1)].text).lower()

desc = ''.join(ch for ch in description if ch not in exclude)

for x in range(len(root[counter])):

subEle = (root[counter][x].tag)

if subEle.endswith(('cve-id')):

cveID = root[counter][x].text

if cveID != name:

print('The Name does not match the CVE number!')

sys.exit(1)

elif subEle.endswith(('published-datetime')):

datePub = root[counter][x].text

elif subEle.endswith(('last-modified-datetime')):

dateModified = root[counter][x].text

elif subEle.endswith(('cvss')):

cvssScore = root[counter][x][0][0].text

cvssAccessVector = root[counter][x][0][1].text

cvssAccessComplexity = root[counter][x][0][2].text

cvssAuth = root[counter][x][0][3].text

cvssConfImpact = root[counter][x][0][4].text

cvssIntegrityImpact = root[counter][x][0][5].text

cvssAvailabilityImpact = root[counter][x][0][6].text

cvssDateTime = root[counter][x][0][8].text

elif subEle.endswith(('cwe')):

cweID = root[counter][x].get('id')

elif subEle.endswith(('summary')):

summary = root[counter][x].text

summary = summary.replace(',', '')

for i in (range(len(whiteList))):

if (whiteList[i] in desc):

checker = True

if checker:

for i in (range(len(blackList))):

if (blackList[i] in desc):

checker = False

if checker:

writer.writerow( (name, datePub, dateModified, cvssScore, cvssAccessVector, cvssAccessComplexity, cvssAuth, cvssConfImpact, cvssIntegrityImpact, cvssAvailabilityImpact, cvssDateTime, cweID, summary) )

totalCVE += 1

print("Relevant CVEs: " + str(totalCVE) + '\n')

finally:

return totalCVE

def usage():

print('\nUSAGE: \'python NVDCVEv2ParserCSV.py <nvdcve1.xml> ... <vndcveN.xml>\', \n\twhere <nvdcve#.xml> is a vesion 2 NVD CVE XML file.\n')

print('OUTPUT: A \'out.csv\' file containing all of the Flash relevant CVEs from the input files.\n')

sys.exit(1)

if __name__ == '__main__':

totalArgs = len(sys.argv)

totalCVEs = 0

if totalArgs < 2:

usage()

fw = open('out.csv', 'wb')

try:

print('')

writer = csv.writer(fw)

for i in range(1,totalArgs):

totalCVEs += main(sys.argv[i], writer)

finally:

print('Total CVEs written to \'out.csv\': ' + str(totalCVEs) + '\n')

fw.close()

The following script is used to tally the number of CVEs (given the output of the previous script).

import sys, csv

def main(csvName):
	print('The following is the number of CWEs mapped into by NVD:')
	# Array for CWE Cross Section Mapped into by NVD (http://nvd.nist.gov/cwe.cfm)
	nvdCWEs = ['CWE-16', 'CWE-20', 'CWE-22', 'CWE-59', 'CWE-78', 'CWE-79', 'CWE-89', 'CWE-94', 'CWE-119', 'CWE-134', 'CWE-189', 'CWE-200', 'CWE-255', 'CWE-264', 'CWE-287', 'CWE-310', 'CWE-352', 'CWE-362', 'CWE-399', 'TODO']
  # Array to count
	cweCounters = [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]
	totalCount = 0
	# Read row by row
	with open(csvName, 'rb') as f:
		reader = csv.reader(f, delimiter=',')
		for row in reader:
			name = row[11]
			for counter in range(len(nvdCWEs)):
				if name == nvdCWEs[counter]:
					cweCounters[counter] += 1
					totalCount += 1
		for counter in range(len(nvdCWEs)):
			print(str(nvdCWEs[counter]) + ': ' + str(cweCounters[counter]))
		print('-------------')
		print('Total: ' + str(totalCount))

def usage():
	print('Usage: \'python CWEStatsCSV.py <csvFile>\', where csvFile is the file produced NVDCVEv2ParserCSV.py.')
	sys.exit(1)

if __name__ == '__main__':
	totalArgs = len(sys.argv)
	if totalArgs < 2:
		usage()
	fileName = sys.argv[1]
	main(fileName)

import sys, csv

def main(csvName):

print('The following is the number of CWEs mapped into by NVD:')

# Array for CWE Cross Section Mapped into by NVD (http://nvd.nist.gov/cwe.cfm)

nvdCWEs = ['CWE-16', 'CWE-20', 'CWE-22', 'CWE-59', 'CWE-78', 'CWE-79', 'CWE-89', 'CWE-94', 'CWE-119', 'CWE-134', 'CWE-189', 'CWE-200', 'CWE-255', 'CWE-264', 'CWE-287', 'CWE-310', 'CWE-352', 'CWE-362', 'CWE-399', 'TODO']

# Array to count

cweCounters = [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]

totalCount = 0

# Read row by row

with open(csvName, 'rb') as f:

reader = csv.reader(f, delimiter=',')

for row in reader:

name = row[11]

for counter in range(len(nvdCWEs)):

if name == nvdCWEs[counter]:

cweCounters[counter] += 1

totalCount += 1

for counter in range(len(nvdCWEs)):

print(str(nvdCWEs[counter]) + ': ' + str(cweCounters[counter]))

print('-------------')

print('Total: ' + str(totalCount))

def usage():

print('Usage: \'python CWEStatsCSV.py <csvFile>\', where csvFile is the file produced NVDCVEv2ParserCSV.py.')

sys.exit(1)

if __name__ == '__main__':

totalArgs = len(sys.argv)

if totalArgs < 2:

usage()

fileName = sys.argv[1]

main(fileName)

Python Resources

This will contain some recommended Python links and resources.

Python 101

Keywords

Miscellaneous Python Code

Python Resources

Leave a Reply Cancel reply