# Retire.js Tools

## Overview

### What is Retire.js Tools

- Detect codebases with known bugs.

### How to use Retire.js Tools

- The ways to use Retire.js：
  - A command line scanner.
  - A grunt plugin.
  - A Chrome extension.
  - A Firefox extension.
  - Burp and OWASP Zap plugin.

#### Why Retire?
There are numerous JavaScript libraries for the Web and Node.js, simplifying development but we need to stay up-to-date on security fixes. **"Using Components with Known Vulnerabilities"**  is now a part of the OWASP Top 10 list of security risks and insecure libraries can pose a huge risk to your Web app. The goal of Retire.js is to help you detect the use of JS-library versions with known vulnerabilities.

**1. Use the return.js plug-in for actual combat in chrome**

1.1 Download plug-in.

![pic1](./image/Retirejs/pic1.jpg)

1.2 Open the Google extension and drag the plugin.

![pic2](./image/Retirejs/pic2.jpg)

1.3 Get to the page you need to test and click **Retire.js** to grab it.

1.4 The weak version of the plug-in scanned with a red prompt. Click to view it.

1.5 Click **Save** to generate the report and view it.

## Page

- [Retire.js Tools](https://retirejs.github.io/retire.js/?&exchange_code=035ad5c4c91c44aeaf0cb91d789b7e25)