ppmap
Prototype pollution scanner for URL gadgets. Pollution without a sink is weak; pair with the JS review playbook.
Tags: prototype-pollution, js, dom
- Category
- inject
- Maintenance signal
- maintained
Use this when: Prototype pollution. A polluted property is a lead. Show the sink it reaches.
Install
go
go install github.com/kleiton0x00/ppmap@latestCommand templates
Probe a URL
echo {url} | ppmap