search

kleiton0x00 / ppmap

A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.
https://kleiton0x00.github.io
GNU General Public License v3.0
490 stars 70 forks source link

Not working in one VPS #14

Closed marcelo321 closed 2 years ago

marcelo321 commented 2 years ago

I wanted to know if you maybe know a workaround this. I sucesfully tried the tool and it worked in 2 of my VPS, but in one of them it fails, it goes throw all the "requests" pretty fast and gives "erro" in all of them.

echo https://tomnomnom.uk/pp/?page=foo | ppmap

    dMMMMb  dMMMMb  dMMMMMMMMb  .aMMMb  dMMMMb     v1.2.0
   dMP.dMP dMP.dMP dMP"dMP"dMP dMP"dMP dMP.dMP 
  dMMMMP" dMMMMP" dMP dMP dMP dMMMMMP dMMMMP"  
 dMP     dMP     dMP dMP dMP dMP dMP dMP           
dMP     dMP     dMP dMP dMP dMP dMP dMP            @kleiton0x7e

2022/08/19 05:26:10 [ERRO] https://tomnomnom.uk/pp/?page=foo&constructor%5Bprototype%5D%5Bppmap%5D=reserved
2022/08/19 05:26:10 [ERRO] https://tomnomnom.uk/pp/?page=foo&__proto__.ppmap=reserved
2022/08/19 05:26:10 [ERRO] https://tomnomnom.uk/pp/?page=foo&constructor.prototype.ppmap=reserved
2022/08/19 05:26:10 [ERRO] https://tomnomnom.uk/pp/?page=foo&__proto__%5Bppmap%5D=reserved

I successfully installed the requisites and chrome but something (I don't know what) fails when I run it. I updated everything and might be something I am unaware of.

Any idea what I can do to debug what's failing?

kleiton0x00 commented 2 years ago

I haven't used ppmap in any VPS so I don't really know what the issue might be. Since you tried 2 VPSs and 1 one of them worked, I assume it has do be with the other VPS and not ppmap itself. Can you please provide me with more information about the faulty VPS? Maybe you have setup a proxy or sth?

kleiton0x00 commented 2 years ago

Closing the issue due to long inactivity.