Installation
Major releases are pushed to NPM and can be simply installed using:
$ npm install @doyensec/electronegativity -g
Usage
$ electronegativity -h
Option | Description |
---|---|
-V | output the version number |
-i, --input | input (directory, .js, .htm, .asar) |
-o, --output | save the results to a file in csv or sarif format |
-h, --help | output usage information |
$ electronegativity -i /path/to/electron/app
Using electronegativity to look for issues in an asar
archive and saving the results in a csv file:$ electronegativity -i /path/to/asar/archive -o result.csv
Note: if you're running into the Fatal Error "JavaScript heap out of memory", you can run node using node --max-old-space-size=4096 electronegativity -i /path/to/asar/archive -o result.csv
Credits
Electronegativity was made possible thanks to the work of Claudio Merloni, Ibram Marzouk, Jaroslav Lobačevski and many other contributors.
This work has been sponsored by Doyensec LLC.