evilpacket / bower-burp-static-analysis

Nov 2014 scan of bower using burp suite static analysis engine

Overview

This was the result of being nerd snipped by @tomsteele into scanning bower with the burp suite static analyzer.

Warning it's like 2.7 GB of json (I suggest using the output.nljson) if you want to tinker with the data. It's missing the raw req / res, but those probably aren't useful anyway.

bower.json

List of packages (git urls) that were pulled from bower

scan.sh

Used to clone each package and run the files using burpstaticscan into burp suite.

log-scan-issue.js

Listens to burp and logs when an issue is found to a file

raw_data/

Raw results from the scan

output.nljson

raw results pushed into a newline json file that's easily imported into dat

convert-to-dat.js

Used to convert raw_data into the new line json file.

Enjoy