Does anyone know of a .dll
scanner that searches for known vulnerabilities?
At work, we have a project which uses Nuget packages, and other .dll dependencies. I know there are databases of known vulnerabilities 12, but does anyone know of a tool that will scan a build output folder for .dll
names/versions/etc. to spot .dll
s with known vulnerabilities?
The goal will be to have this tool run periodically, and alert me if a vulnerability is found in our of our dependencies so that we can update it. Always staying up to date is a testing burden (still working on comprehensive automated testing!) so not updating our dependencies more than we have to is very necessary still for us.
Other information about the environment:
- C# project/solution with VS 2015 Update 1
- Does not have to be open source, and if it's pricey the business can probably afford it.
EDIT: I did not know that software recommendations were not appropriate for this site. I'm leaving it open on here (even though it will probably be closed) so that those who upvoted the post can find it again.
I re-posted the question on the appropriate stackexchange [here]