search

kleiton0x00 / ppmap

A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.
https://kleiton0x00.github.io
GNU General Public License v3.0
490 stars 70 forks source link

Idea: use js-library-detector for broader gadgets detection #3

Closed lirantal closed 3 years ago

lirantal commented 3 years ago

There's an npm project at https://www.npmjs.com/package/js-library-detector which provides code/library that you can run to detect which libraries exist on the page. Very similar to the gadgets detection that you referenced in the https://gist.github.com/nikitastupin/b3b64a9f8c0eb74ce37626860193eaec snippet.

kleiton0x00 commented 3 years ago

Thank you for the suggestion, will definitely add this in my TO-DO list. More gadget detection = more XSS :)