Damn Small JS Scanner

Damn Small JS Scanner (DSJS) is a fully functional JavaScript library vulnerability scanner written in under 100 lines of code. It has to be noted that it is a derivative work from Retire.js project. Currently it checks for vulnerable versions of following JavaScript libraries: angularjs, backbone, dojo, easyXDM, ember, handlebars, jPlayer, jquery, jquery-migrate, jquery-mobile, jquery-ui-autocomplete, jquery-ui-dialog, jquery-ui-tooltip, jquery.prettyPhoto, mustache, plupload, prototypejs, sessvars, YUI.

As of optional settings it supports HTTP proxy together with HTTP header values User-Agent, Referer and Cookie.

Sample runs

$ python3 dsjs.py
Damn Small JS Scanner (DSJS) < 100 LoC (Lines of Code) #v0.3a
by: Miroslav Stampar (@stamparm)
usage: dsjs.py [-h] [-u URL] [--cookie COOKIE] [--user-agent UA]
[--referer REFERER] [--proxy PROXY] [--version]
options:
-h, --help show this help message and exit
-u URL, --url URL Target URL (e.g. "http://www.target.com")
--cookie COOKIE HTTP Cookie header value
--user-agent UA HTTP User-Agent header value
--referer REFERER HTTP Referer header value
--proxy PROXY HTTP proxy address (e.g. "http://127.0.0.1:8080")
--version show program's version number and exit

$ python3 dsjs.py -u "www.microsoft.com"
Damn Small JS Scanner (DSJS) < 100 LoC (Lines of Code) #v0.3a
by: Miroslav Stampar (@stamparm)
[x] jquery (v1.1.4 <) v1.9.1 (< v3.4.0) (info: 'https://blog.jquery.com/2019/04/10/jquery-3-4-0-released/;
https://nvd.nist.gov/vuln/detail/CVE-2019-11358')
scan results: possible vulnerabilities found

Requirements

Python version 3.x is required for running this program.