Endo is a distributed secure JavaScript sandbox, based on SES
javascript security multi-tenant sandbox supply-chain capabilities hardened ocaps powerbox prototype-pollution captp
- Updated
- JavaScript
#
prototype-pollution
Here are 28 public repositories matching this topic...
A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀
rust security chromium bugbounty vulnerability-scanners security-tools rust-tools bugbountytips bugbounty-tool prototype-pollution
- Updated
- Rust
A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.
xss cybersecurity bug-bounty xss-vulnerability infosec bugbounty xss-exploitation xss-detection bugbounty-tool prototype-pollution
- Updated
- Go
The Most Advanced Client-Side Prototype Pollution Scanner
security hacking web-security offensive-security hacktoberfest red-team security-tools web-scanner web-security-research web-sec-scanner redteaming scanner-web frontend-security offensivesecurity redteam-tools javascript-security prototype-pollution web-security-audit
- Updated
- Go
A collection of Server-Side Prototype Pollution gadgets and exploits
- Updated
- JavaScript
Let's check if your target is vulnerable for client side prototype pollution.
- Updated
- Go
Next.js React Server Components RCE exploit for CVE-2025-55182
- Updated
- Python
A tool which helps identifying client-side prototype polluting libraries
security chromium bugbounty vulnerability-scanners security-tools cspp bugbountytips bugbounty-tool prototype-pollution
- Updated
- JavaScript
A website developed with Nodejs. This website includes server side prototype pollution vulnerability
- Updated
- CSS
Detecting prototype pollution vulnerabilities in JavaScript using static analysis
- Updated
- JavaScript
Secure drop-in replacement for the `JSON` global with prototype pollution protection
- Updated
- JavaScript
Different unrelated stuff which can not be categorized by qualifying feature
- Updated
- JavaScript
Security Research and PoC
security security-audit research exploit cybersecurity penetration-testing rce vulnerability cve security-tools product-security prototype-pollution log4shell
- Updated
- Java
A CTF challenge we put together for Ekoparty's 2023 main CTF
- Updated
- HTML
Gadgets in the JavaScript runtime based on the ECMAScript specification
- Updated
- HTML
A sample application vulnerable to JavaScript prototype pollution
- Updated
- JavaScript
Prototype Pollution Checker is a security tool designed to detect potential Prototype Pollution vulnerabilities on target URLs by injecting payloads and verifying responses. This tool uses Selenium to automate browser interactions and concurrently checks multiple URLs for vulnerabilities.
- Updated
- Python
Proof-of-concept research tool for CVE-2025-55182, a critical unauthenticated RCE in Next.js App Router caused by server-side object injection in React Server Components and Server Actions, including UTF-16LE WAF evasion techniques.
react nextjs waf-bypass react-server-components prototype-pollution server-actions utf-16le remote-code-execution-rce cve-2025-55182
- Updated
- Python
🚨 Exploit and scan for CVE-2025-55182, a critical React/Next.js vulnerability enabling remote code execution through prototype pollution techniques.
react docker security react-dom proof-of-concept exploit nextjs docker-image lab poc rce vulnerability cve cve-scanning prototype-pollution cve-2025-55182 react2shell cve-2025-66478
- Updated
- Python
JavaScript Prototype Pollution Attack demo against a NodeJS Express server using Lodash
- Updated
- JavaScript
Improve this page
Add a description, image, and links to the prototype-pollution topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the prototype-pollution topic, visit your repo's landing page and select "manage topics."