Skip to content

msrkp/PPScan

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

53 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

PPScan

Client Side Protype pollution Scanner

How to use?

  1. Clone the repo
  2. Install addon
    • In chrome,
    • Go to More Tools -> Extenstions
    • Enable Developer Mode
    • Click on "Load unpacked" and select the cloned repo folder.
  3. Visit the websites you want to test

It only checks for vulnerable location parsers.

Examples

  1. https://msrkp.github.io/pp/1.html
  2. https://msrkp.github.io/pp/2.html

Why window mode?

Window mode is useful when the application uses frame busting.

Example

https://msrkp.github.io/pp/3.html

Note

If, you see XFO or CSP errors reload the extension. Extension tested on chrome version 86.

Found PP? What's Next?

Check for the gadgets here https://github.com/BlackFan/client-side-prototype-pollution

About

Client Side Prototype Pollution Scanner

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published