{"id":13636091,"url":"https://github.com/h3xstream/burp-retire-js","last_synced_at":"2025-05-16T01:06:16.397Z","repository":{"id":23824143,"uuid":"27201018","full_name":"h3xstream/burp-retire-js","owner":"h3xstream","description":"Burp/ZAP/Maven extension that integrate Retire.js repository to find vulnerable Javascript libraries.","archived":false,"fork":false,"pushed_at":"2024-06-14T06:19:56.000Z","size":12123,"stargazers_count":203,"open_issues_count":8,"forks_count":53,"subscribers_count":21,"default_branch":"master","last_synced_at":"2025-04-08T11:15:35.070Z","etag":null,"topics":["burp-plugin","javascript","maven","scanner","vulnerability","zap-plugin"],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/h3xstream.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2014-11-26T23:39:42.000Z","updated_at":"2025-03-07T19:02:53.000Z","dependencies_parsed_at":"2024-01-07T08:10:24.069Z","dependency_job_id":"ad94a427-f636-4aba-85c0-e4a554992440","html_url":"https://github.com/h3xstream/burp-retire-js","commit_stats":null,"previous_names":[],"tags_count":1,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h3xstream%2Fburp-retire-js","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h3xstream%2Fburp-retire-js/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h3xstream%2Fburp-retire-js/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h3xstream%2Fburp-retire-js/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/h3xstream","download_url":"https://codeload.github.com/h3xstream/burp-retire-js/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":254448579,"owners_count":22072764,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["burp-plugin","javascript","maven","scanner","vulnerability","zap-plugin"],"created_at":"2024-08-02T00:00:57.005Z","updated_at":"2025-05-16T01:06:11.374Z","avatar_url":"https://github.com/h3xstream.png","language":"JavaScript","funding_links":[],"categories":["Scanners","Weapons","\u003ca id=\"b6b5b261338c5d44d981bc9f239219f2\"\u003e\u003c/a\u003e工具"],"sub_categories":["Burpsuite, Caido and ZAP Addons","\u003ca id=\"285c52a4e04dd2f86646c8e1235c9332\"\u003e\u003c/a\u003e工具"],"readme":"# Retire.js (Burp plugin) [![Build Status](https://travis-ci.org/h3xstream/burp-retire-js.svg)](https://travis-ci.org/h3xstream/burp-retire-js)\n\n[Burp](http://portswigger.net/burp/) / [ZAP](https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project) extension that integrate [Retire.js](https://github.com/bekk/retire.js) repository to find vulnerable JavaScript libraries. It passively look at JavaScript files loaded and identify those vulnerable based on various signature types (URL, filename, file content or specific hash).\n\n## License\n\nThis software is release under [Apache 2.0](https://www.apache.org/licenses/LICENSE-2.0).\n\n## Downloads\n\nLast updated : December 10th, 2019\n\nBurp Suite plugin : [Download](https://raw.githubusercontent.com/h3xstream/burp-retire-js/gh-pages/releases/burp/burp-retire-js-3.0.2.jar) (also available on the [BApp Store](https://pro.portswigger.net/bappstore/ShowBappDetails.aspx?uuid=36238b534a78494db9bf2d03f112265c))\n\nZAP plugin : [Download](https://raw.githubusercontent.com/h3xstream/burp-retire-js/gh-pages/releases/zap/retirejs-alpha-3.0.2.zap)\n\n\n--------------------------\n\n## Burp plugin\n\n![Retire.js Burp plugin](https://raw.githubusercontent.com/h3xstream/burp-retire-js/gh-pages/screenshots/screenshot_burp_plugin.png)\n\n![Retire.js Burp plugin](https://raw.githubusercontent.com/h3xstream/burp-retire-js/gh-pages/screenshots/screenshot_burp_plugin_animate.gif)\n\n\n## ZAP plugin\n\n![Retire.js ZAP plugin](https://raw.githubusercontent.com/h3xstream/burp-retire-js/gh-pages/screenshots/screenshot_zap_plugin.png)\n\n## Maven plugin [![Maven Central](https://maven-badges.herokuapp.com/maven-central/com.h3xstream.retirejs/retirejs-maven-plugin/badge.svg)](http://search.maven.org/#search%7Cga%7C1%7Cg%3A%22com.h3xstream.retirejs%22%20a%3A%22retirejs-maven-plugin%22)\n\nRun the Maven plugin with the goal `scan`:\n\n    $ cd myproject\n    $ mvn com.h3xstream.retirejs:retirejs-maven-plugin:scan\n       [...]\n    [INFO] --- retirejs-maven-plugin:1.0.0-SNAPSHOT:scan (default-cli) @ myproject ---\n    [WARNING] jquery.js contains a vulnerable JavaScript library.\n    [INFO] Path: C:\\Code\\myproject\\src\\main\\webapp\\js\\jquery.js\n    [INFO] jquery version 1.8.1 is vulnerable.\n    [INFO] + http://bugs.jquery.com/ticket/11290\n    [INFO] + http://research.insecurelabs.org/jquery/test/\n       [...]\n\nThe additional parameter `-DretireJsBreakOnFailure` can be use to break the build when at least one vulnerability is found.\n\n    [INFO] ------------------------------------------------------------------------\n    [INFO] BUILD FAILURE\n    [INFO] ------------------------------------------------------------------------\n    [INFO] Total time: 1.450 s\n    [INFO] Finished at: 2015-02-19T13:37:00-05:00\n    [INFO] Final Memory: 11M/245M\n    [INFO] ------------------------------------------------------------------------\n    [ERROR] Failed to execute goal com.h3xstream.retirejs:retirejs-maven-plugin:1.0.0:scan (default-cli) on project\n    my-web-app: 6 known vulnerabilities were identified in the JavaScript librairies. -\u003e [Help 1]\n    [ERROR]\n\n### Run the Maven plugin as part of your build\n\nUse the following configuration to run the Maven plugin as part of your build.  Only one `\u003crepoUrl\u003e` may be specified at a time.\nTo scan / iterate earlier in your build cycle, you can bind the plugin to the `validate` phase.\n\n```xml\n  \u003cplugin\u003e    \n    \u003cgroupId\u003ecom.h3xstream.retirejs\u003c/groupId\u003e\n    \u003cartifactId\u003eretirejs-maven-plugin\u003c/artifactId\u003e\n    \u003cversion\u003e3.0.1\u003c/version\u003e\n    \u003cconfiguration\u003e\n      \u003crepoUrl\u003ehttps://raw.githubusercontent.com/RetireJS/retire.js/master/repository/jsrepository.json\u003c/repoUrl\u003e\n      \u003c!--\u003crepoUrl\u003ehttps://raw.githubusercontent.com/RetireJS/retire.js/master/repository/npmrepository.json\u003c/repoUrl\u003e--\u003e\n    \u003c/configuration\u003e\n    \u003cexecutions\u003e\n      \u003cexecution\u003e\n        \u003cid\u003escanProjectJavascript\u003c/id\u003e\n        \u003cgoals\u003e\n          \u003cgoal\u003escan\u003c/goal\u003e\n        \u003c/goals\u003e\n        \u003cphase\u003einstall\u003c/phase\u003e\n      \u003c/execution\u003e\n    \u003c/executions\u003e\n  \u003c/plugin\u003e\n```      \n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fh3xstream%2Fburp-retire-js","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fh3xstream%2Fburp-retire-js","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fh3xstream%2Fburp-retire-js/lists"}