Scanning website for vulnerable js libraries

Latest Version

Version
1.9.0
Update
September 21, 2023
Size
132KiB
Developer
Category
Users
30,000+
Rating
4.88889 ★
Manifest Version
2
Web Store Status
Languages Support
English
See more
Permissions

WebRequest
Tabs
See more

retire.js Extension

Scan a web app for use of vulnerable JavaScript libraries. The goal of retire.js is to help you detect use of version with known vulnerabilities. Retire.js web extension isn't the original RetireJS project but is predominantly based on RetireJS opensource repo available on github - http://retirejs.github.io/retire.js/
==========
Release 1.9.0 - Adjusting severities based on github advisory data
Release 1.8.9 - Fixed severity rating
Release 1.8.8 - Added tableexport.jquery.plugin vuln
Release 1.8.6 - Adding jquery-deparam vuln
Release 1.8.5 - Update js repository
Release 1.8.4 - Fixed CVE-2019-11358
Release 1.8.3 - Sync of versions with github database
Release 1.8.2 - Fixed npm name of jquery.datatables
Release 1.8.1 - Improved extractor for jquery.dataTables
Release 1.8.0 - Added pendo vuln
Release 1.7.9 - Added one more test case
Release 1.7.8 - Updating vulnerability repo based on information from OSV
Release 1.7.7 - Added test case for ckeditor
Release 1.7.6 - Added CKEditor Vulnerable version less than 4.21.0
Release 1.7.5 - Improved Svelte detection
Release 1.7.4 - Adding some more stuff and a bit of cleanup
Release 1.7.3 - Updated information on known vulnerabilities
Release 1.7.2 Added Ember.js prototype pollution vuln
Release 1.7.1 - Adjusted the severity, from medium to high, of the vulnerabilities CVE 2022-24785 and CVE-2022-31129
Release 1.7.0 - Fixed underscore.js typo
Release 1.6.9 - Fixed moment.js test
Release 1.6.8 - Added jquery-ui CVE-2022-31160
Release 1.6.7 - Fixup for tinyMCE which includes dompurify
Release 1.6.6 - Added next.js vulnerabilities
Release 1.6.5 - Fixed uri jquery.dataTables vuln
Release 1.6.4 - Added Svelte vulns
Release 1.6.3 - Reported vuln for all versions of AlaSQL library
Release 1.6.2 - Fixed axios typo
Release 1.6.1 - Axios vulnerabilities added
Release 1.6.0 - Adding plupload vulns for 3.1.4, 3.1.5, 2.3.8 and 2.3.9
Release 1.5.8 - Added CVE-2017-18214 in js report
Release 1.5.6 - Added missing jquery-ui CVEs
Release 1.5.5 - Added XSS vulnerabilities for CKEditor
Release 1.5.4 - Added medium vuln for plupload below 2.3.7 and below 3.1.3
Release 1.5.3 - Removed errors in the reports
Release 1.5.2 - I updated all of the mismatching severities based on NIST
Release 1.5.1 - Additional error handling
Release 1.5.0 - Fixed some bugs to recognize vulnerable js libs
Release 1.4.9 - Added additional Bootstrap's file content extractor
Release 1.4.8 - Fixed incorrect tinyMCE vuln version
Release 1.4.7 - Added some missing vulns to json repo
Release 1.4.6 - Changed summary for jquery.ui.tooltip related vulnerability
Release 1.4.5 - CVE specified for jQuery.htmlPrefilter
Release 1.4.0 - Added CVE-2020-7676 for angular < 1.8.0
Release 1.3.8 - Added possibility of showing unknowns
Release 1.3.7 - Reports XSS in jQuery < 3.5.0
Release 1.3.6 - changed handlebars.js -> handlebars in jsrepository.json
Release 1.3.5 - Fixed bug: Handlebars not detected properly in newer versions
Release 1.3.4 - Adds some missing vulns
Release 1.3.3 - Added popular bootstrap's uri extractor
Release 1.3.2 - Added some vulns
Release 1.3.1 - Added jQuery mobile XSS vulnerability
Release 1.3.0 - Added jQuery vulnerability as per CVE-2019-11358
Release 1.2.9 - Added two Prototype Pollution vulns in Handlebars
Release 1.2.8 - Added more descriptive link for angularjs vulnerability
Release 1.2.7 - Added CVE identifiers about bootstrap release below 4.3.1 and below 3.4.1
Release 1.2.6 - Fixing regex for knockout
Release 1.2.5 - Updated report about bootstrap vulnerabilities
Release 1.2.4 - Fixed CkEditor vuln
Release 1.2.3 - Added regex for handlebars hashbang comment
Release 1.2.2 - Bootstrap: clarified vulnerabilities, added CVE's (#257)
Release 1.2.1. - Replaced regex to match older versions of tinyMCE (#256)
Release 1.2.0 - Fixed wrong react versioning for bug
Release 1.1.9 - Added ExtJS vulns
Release 1.1.8 - Added vue.js vulns
Release 1.1.7 - Fixed typo in repo
Release 1.1.6 - Add summary for CVE-2011-4969 and link to jQuery ticket (#228)
Release 1.1.5 - CkEditor xss vulnerability reported
==========
Read more

Source Manifest.json

{ "update_url": "https://clients2.google.com/service/update2/crx", "background": { "page": "background.html", "persistent": true }, "browser_action": { "default_icon": "icons/icon48.png", "default_name": "retire.js", "default_popup": "popup.html" }, "content_scripts": [{ "js": [ "js/content.js" ], "matches": [ "" ], "run_at": "document_start" }], "content_security_policy": "script-src 'self'; object-src 'self'", "description": "Scanning website for vulnerable js libraries", "icons": { "128": "icons/icon128.png", "16": "icons/icon16.png", "48": "icons/icon48.png" }, "manifest_version": 2, "name": "retire.js", "permissions": [ "", "webRequest", "tabs" ], "sandbox": { "pages": [ "sandbox.html" ] }, "version": "1.9.0"}
Read more

How to download and manually install retire.js extension for Chrome

Looking for a way to install retire.js extensions for Chrome, you can search for them in the Chrome Web Store, clicking the "Add to Chrome" button, and following the straightforward process.

However, you may need to install retire.js extensions manually, this article outlines two simple methods to effortlessly install retire.js extensions, whether they come as unpacked folders in compressed formats like .zip or as .crx files.

Method 1: Download retire.js extension and manually install through Drag &Drop

If you ever need to manually install a retire.js extension for Chrome, don't worry, it's a simple process. Just follow these easy steps, and you will have your extension ready to use in no time.

Step 1: Download the retire.js Extension by clicking the "Download CRX" button on the website.

Look for the retire.js extension you wish to install. Go to the website and download the retire.js extension package, which is usually a .CRX file and comes in a zipped file. Here ".crx" file is the format for retire.js extension that contains all the data.

Step 2: Extract &Arrange Files

Once the file is downloaded, extract that file into its own folder. Similarly, give that extension files a permanent home. In other words, keep it in a folder that you don't accidentally delete it because these files will be needed to make that extension work.

Step 3: Go to the Chrome Extensions Page

Open Google Chrome and in the address bar, type chrome://extensions; it will open the Google Chrome extensions page. Make sure that "My extensions" is selected in the sidebar.

Step 4: Drag and Drop the Extension

Now, go to the folder where you extracted the retire.js extension and drag &drop the extension file from there anywhere onto the extension page within Google Chrome.

Step 5: Complete the Installation

Once you drag and drop the extension file, follow the steps that Google Chrome takes you through. Similarly, if the extension file is of .crx file format, you will be required to review the permissions and then add the extension.

Now, you can manage that added extension as you would like to with any other Chrome extension that you added through Chrome Webstore. Its icon will also appear in the Google Chrome Menu on the right side of the address bar once you activate it.

Method 2: Download retire.js extension for Chrome and install in Developer Mode

This is another method to install retire.js extension manually, but the twist is that here, you install by enabling the developer mode option provided in Google Chrome. This mode is commonly used for testing extensions or running unpublished tools.

Step 1: Download the retire.js extension file

Select and download the retire.js extension by clicking the 'Download CRX' button on the website.

Step 2: Extract the downloaded contents

Convert the file to a ZIP file if it is in CRX format then extract the retire.js extension zip file or folder that you downloaded. Make sure you extract it using the same folder name and keep it safely in another folder, so you don't delete it by mistake. The extracted folder will be needed to keep your retire.js extension running.

Step 3: Open Chrome Extension Setting Page

In the address bar of Google Chrome, type chrome://extensions and open the Chrome Extension Page.

Step 4: Enable Developer Mode

After opening the Chrome Extension page, look at the top right side, and you will find the toggle option of "Developer mode."Simply enable that developer mode option.

Step 5: Load the Unpacked Extension

Once you enable the developer mode option, you will see the menu of Load Unpacked, Pack Extensions and Update. From that, select the option "Load unpacked."

Step 6: Select the Extension Folder

Once the pop-up opens upon clicking Load unpacked, select the retire.js extension directory and click on the "Select Folder "button.

Step 7: Confirm and Install

After you select an extension folder of a Google Chrome extension you're installing manually, confirm its installation for the final time and let the installation complete.

Conclusion

Here we've made a step-by-step guide on How to manually install retire.js extension in 2 ways. We hope this guide proves helpful.

Similar Extensions

icon

Vulners Web Scanner Extension · Productivity 30,000+ 20 ★ 534KiB

icon

OWASP Penetration Testing Kit Extension · Developer Tools 30,000+ 43 ★ 7.14MiB

icon

CounterXSS Extension · Accessibility 30,000+ 3 ★ 98.96KiB

icon

FoxyProxy Extension · Productivity 30,000+ 774 ★ 214KiB

icon

Shodan Extension · Productivity 30,000+ 136 ★ 27.6KiB

icon

XSS Extension · Developer Tools 30,000+ 6 ★ 232KiB

icon

YesWeHack VDP Finder Extension · Productivity 30,000+ 2 ★ 88.31KiB

icon

Untrusted Types for DevTools Extension · Developer Tools 30,000+ 3 ★ 39.16KiB

icon

HackBar Extension · Developer Tools 30,000+ 52 ★ 1.56MiB

icon

Trufflehog Extension · Developer Tools 30,000+ 8 ★ 34.61KiB

icon

Plugin Vulnerabilities Extension · Developer Tools 30,000+ 1 ★ 9.98KiB

icon

Hack-Tools Extension · Developer Tools 30,000+ 27 ★ 1.61MiB

icon

Bishop Vulnerability Scanner Extension · Developer Tools 30,000+ 12 ★ 198KiB

icon

DotGit Extension · Developer Tools 30,000+ 12 ★ 147KiB

icon

Tracy Extension · Developer Tools 30,000+ 2 ★ 899KiB

icon

Cyber Web Tools Extension · Developer Tools 30,000+ 6 ★ 340KiB

icon

Security-Header-Extension Extension · Developer Tools 30,000+ 7 ★ 510KiB

icon

Clickjacking Test Extension · Developer Tools 30,000+ 9 ★ 71.23KiB

icon

ZoomEye Tools Extension · Developer Tools 30,000+ 6 ★ 583KiB

icon

d3coder Extension · Developer Tools 30,000+ 37 ★ 108KiB

icon

FOFA Pro View Extension · Productivity 30,000+ 11 ★ 887KiB

icon

FindSomething Extension · Developer Tools 30,000+ 34 ★ 512KiB

icon

HackBar Extension · Developer Tools 30,000+ 16 ★ 101KiB

icon

JS Vulnerability Detector Extension · Developer Tools 30,000+ 1 ★ 459KiB

User reviews

icon

Kanthanathan S (ID: 000000f7d74cb655) Voted 4 ★ - Updated 04/26/2023 Extremely easy to find out vulnerable java scripts in the application.

icon

Lukas Bertoni (ID: 000000ff7cf3f01a) Voted 5 ★ - Updated 08/09/2018 Usefull Information Security addon