Damn Small JS Scanner

Damn Small JS Scanner (DSJS) is a fully functional JavaScript library vulnerability scanner written in under 100 lines of code. It has to be noted that it is a derivative work from Retire.js project. Currently it checks for vulnerable versions of following JavaScript libraries: angularjs, backbone, dojo, easyXDM, ember, handlebars, jPlayer, jquery, jquery-migrate, jquery-mobile, jquery-ui-autocomplete, jquery-ui-dialog, jquery-ui-tooltip, jquery.prettyPhoto, mustache, plupload, prototypejs, sessvars, YUI.

As of optional settings it supports HTTP proxy together with HTTP header values User-Agent, Referer and Cookie.

Sample runs

$ python3 dsjs.py
Damn Small JS Scanner (DSJS) < 100 LoC (Lines of Code) #v0.3a
 by: Miroslav Stampar (@stamparm)

usage: dsjs.py [-h] [-u URL] [--cookie COOKIE] [--user-agent UA]
               [--referer REFERER] [--proxy PROXY] [--version]

options:
  -h, --help         show this help message and exit
  -u URL, --url URL  Target URL (e.g. "http://www.target.com")
  --cookie COOKIE    HTTP Cookie header value
  --user-agent UA    HTTP User-Agent header value
  --referer REFERER  HTTP Referer header value
  --proxy PROXY      HTTP proxy address (e.g. "http://127.0.0.1:8080")
  --version          show program's version number and exit

$ python3 dsjs.py -u "www.microsoft.com"
Damn Small JS Scanner (DSJS) < 100 LoC (Lines of Code) #v0.3a
 by: Miroslav Stampar (@stamparm)

 [x] jquery (v1.1.4 <) v1.9.1 (< v3.4.0) (info: 'https://blog.jquery.com/2019/04/10/jquery-3-4-0-released/;
https://nvd.nist.gov/vuln/detail/CVE-2019-11358')

scan results: possible vulnerabilities found

Requirements

Python version 3.x is required for running this program.