prototype-pollution-nsec18
by HoLyVieR
Content released at NorthSec 2018 for my talk on prototype pollution
AI summary
Prototype pollution attack
An analysis of a vulnerability in JavaScript where an attacker can manipulate the prototype of base objects to inject malicious values
- stars
- 515
- forks
- 81
- watching
- 12
- awesome list
- 1
Similar projects
Found by comparing what the projects do, not just their names.
Prototype scanner
Scans for prototype pollution vulnerabilities in server-side applications
Object protector
Protects against Prototype Pollution vulnerabilities in JavaScript objects by freezing specific built-in objects.
JSON parser library
Provides an alternative JSON parser with enhanced security features to mitigate prototype pollution attacks.
Malware analyzer
Sandbox for analyzing and understanding JavaScript malware
Vulnerability scanner
Analyzes JavaScript package or local Node.js project for security vulnerabilities and provides detailed reports.
Proxy exploitation demo
A proof-of-concept project demonstrating a vulnerability in a proxy service to exploit a universal cross-site scripting bug and access restricted internal websites.
Vulnerability scanner
Tools to scan npm packages for known vulnerabilities and outdated dependencies.
Vulnerability scanner
Checks AWS accounts for subdomain hijacking vulnerabilities
Container vulnerability demonstration
A proof-of-concept demonstrating the vulnerability of unsecured containers to privilege escalation attacks
JSON parser
Provides a drop-in replacement for JSON parsing with built-in protection against prototype poisoning vulnerabilities
Vulnerability testing demo
A demo project to integrate the SecTester JS SDK framework into unit tests and CI pipelines for vulnerability testing
Pollution solver
A collection of resources and datasets to help solve atmospheric pollution challenges using Copernicus data
Vulnerability feed
Decentralized platform for IT vendors to share vulnerability information
Malware collection
A repository of JavaScript malware samples collected over time.
Browser exploit
Exploits a vulnerability in outdated Shockwave Flash player to gain control of Internet Explorer and execute malicious code.
Featured in 1 awesome list
Each link jumps to the spot where the list mentions prototype-pollution-nsec18.
