blackhat-arsenal-tools/code_assessment/owasp_dependency_check.md

OWASP dependency-check

Description

Dependency-Check is a Software Composition Analysis tool that identifies project dependencies and checks if there are any known, publicly disclosed, vulnerabilities. The tool can be part of a solution to the OWASP Top 10 2017 A9:2017-Using Components with Known Vulnerabilities.

Categories

• Code Assessment
• Software Composition Analysis

BlackHat Arsenal Sessions

Code

https://github.com/jeremylong/DependencyCheck

Documentation

https://jeremylong.github.io/DependencyCheck/

Lead Developer

• Jeremy Long (@ctxt)

Social Media

• Twitter