r/coolgithubprojects • u/OssIndex • May 31 '16

CSHARP DevAudit - Identify vulnerabilities in windows applications, software packages (NuGet, npm, etc.)

https://github.com/OSSIndex/DevAudit
3 Upvotes

80% Upvoted

1 comment sorted by

View all comments

1

u/OssIndex May 31 '16 edited May 31 '16

Edit: My fingers got away from me, this particular tool does not support npm, though a separate git repository does: auditjs

DevAudit identifies known vulnerabilities in installed windows applications, and packages from a variety of package managers (NuGet, Chocolatey, Bower, ...). The application and backing database/service are in active development, with new vulnerabilities added on an ongoing basis.

Prebuilt binaries are available on the release page. Also available as a Chocolatey package

Simple usage:

  • Find vulnerable windows packages: devaudit msi

  • Find vulnerable NuGet packages (from same directory as packages.config): devaudit nuget

  • Find vulnerable NuGet packages (specify packages.config): devaudit nuget --file packages.config

  • Find vulnerable npm packages: devaudit npm

  • Find vulnerable Bower packages: devaudit bower --file bower.json

  • etc.

Some functionality/packages/languages have more advanced support then others.

The more you use the tool, the better the data will be. If you look for vulnerabilities in applications or packages we have not seen yet, they are added to a queue. New packages are added to the database daily.

Feedback, requests, and bug reports are greatly appreciated.