Standalone victims client to handle java artifacts.
WARNING: This is currently under heavy development.
mvn clean package
$ java -jar target/victims-client-1.0-SNAPSHOT-standalone.jar
USAGE: victims-client [OPTIONS]...[ARGUMENTS]
The victims java client will scan any supplied
pom.xml, jar files or directories supplied as command line
arguments. By default the output will only report when a
vulnerable component was detected, or if an error condition exists.
EXAMPLES:
Scanning a pom.xml file:
victims-client --verbose project/pom.xml
Scanning a jar file:
victims-client --update --verbose file.jar
Scanning a directory of files:
victims-client --verbose --update --recursive project/pom.xml
Printing a jar file fingerprint:
victims-client --jar-info file.jar
Run in interactive mode:
victims-client --repl
OPTIONS:
--db-status displays date the database was last
updated
--help show this help message
--jar-info displays fingerprint information of the
supplied jar file
--recursive recurses directory structure when
scanning a directory
--repl run an interactive victims shell
--update synchronize with the victims web service
--verbose show verbose output
--vicitms-db-driver the jdbc driver to use when connecting
to the victims database
--victims-cache-purge purges all entries in the victims cache
--victims-db-pass set the password to use to connect to
the victims database
--victims-db-purge purges all entries in the victims
database
--victims-db-url the jdbc url connection string to use
with the victims database
--victims-db-user set the user to connect to the victims
database
--victims-home set the directory where victims data
should be stored
--victims-service-entry the uri path to use when connecting to
the victims service
--victims-service-uri the uri to use to synchronize with the
victims database