fallibleinc/retirejslib

Scan for vulnerabilities in JavaScript libraries you use (Python port of retirejs)

retirejslib's Issues

IndexError: no such group

retirejs.scan_endpoint("https://apis.google.com/js/plusone.js")

---------------------------------------------------------------------------
IndexError                                Traceback (most recent call last)
<ipython-input-16-994defb48f3e> in <module>()
----> 1 retirejs.scan_endpoint("https://apis.google.com/js/plusone.js")

~/Jupyter/venv/lib/python3.6/site-packages/retirejs/retirejs.py in scan_endpoint(uri, definitions)
    172     hosted at that uri
    173     """
--> 174     uri_scan_result = scan_uri(uri, definitions)
    175 
    176     filecontent = requests.get(uri, verify=False).text

~/Jupyter/venv/lib/python3.6/site-packages/retirejs/retirejs.py in scan_uri(uri, definitions)
    144 
    145 def scan_uri(uri, definitions=definitions):
--> 146     result = scan(uri, 'uri', definitions=definitions)
    147     return check(result)
    148 

~/Jupyter/venv/lib/python3.6/site-packages/retirejs/retirejs.py in scan(data, extractor, matcher, definitions)
     23             continue
     24         for i in extractors:
---> 25             match = matcher(i, data)
     26             if (match):
     27                 detected.append({"version": match,

~/Jupyter/venv/lib/python3.6/site-packages/retirejs/retirejs.py in _simple_match(regex, data)
     33 def _simple_match(regex, data):
     34     match = re.search(regex, data)
---> 35     return match.group(1) if match else None
     36 
     37 

IndexError: no such group

ImportError: No module named 'vulnerabilities'

When trying to import retirejs after installing it with pip I get the following error:

Python 3.5.1 (default, Mar 3 2016, 09:29:07)
[GCC 5.3.0] on linux
Type "help", "copyright", "credits" or "license" for more information.

import retirejs
Traceback (most recent call last):
File "", line 1, in
File "/usr/lib/python3.5/site-packages/retirejs/init.py", line 2, in
from .retirejs import (scan_endpoint,
File "/usr/lib/python3.5/site-packages/retirejs/retirejs.py", line 2, in
from vulnerabilities import definitions
ImportError: No module named 'vulnerabilities'

Any ideas on what could cause this?

tinyMCE version is not getting detected

https://xxx-xxx-xxx/javascripts/tinymce/tinymce.min.js -> original version 4.7.1 but it shows as $1.$2 as detected from the retirejs endpoint scan. Please have a look at this.
The browser based retirejs is being detected correctly.