PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Server-Side Prototype Pollution Scanner

portswigger.net | tool | #prototype-pollution | #web-security-academy | #portswigger-research | #scanning | #burp-extension
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

PortSwigger's server-side prototype pollution detection techniques are now built into an open source Burp extension, demonstrated by exploiting a Web Security Academy privilege escalation lab.
Published
Collected

Related coverage

blog · portswigger.net
Try it for yourself: the latest PortSwigger Research from Black Hat USA
At Black Hat USA, PortSwigger Research debuted practical web timing attack techniques by James Kettle, now in Param Miner, plus email parsing discrepancy research and new training labs.
blog · portswigger.net
PortSwigger partners with Meta Bug Bounty to empower bug hunters with training and Pro licenses
PortSwigger and Meta Bug Bounty partner to give qualifying hunters Burp Suite Pro licenses and combine Web Security Academy training with Meta's Education Centre for higher-impact findings.
research · portswigger.net
WebSocket Turbo Intruder: Unearthing the WebSocket Goldmine
WebSocket Turbo Intruder brings Turbo Intruder's fast engine to WebSocket testing, fuzzing messages at high speed with smart filtering to uncover races, prototype pollution and access-control bugs.
blog · portswigger.net
DOM Invader and the case of direct eval vs indirect eval
Gareth Heyes explains why DOM Invader can trigger eval exceptions: direct eval calls can access local scope variables, while indirect eval via a renamed reference runs in global scope and cannot.
blog · portswigger.net
New learning paths, from the Web Security Academy
The Web Security Academy introduces structured learning paths with progress tracking; the first two cover server-side vulnerabilities at apprentice level and the essentials of SQL injection.
blog · portswigger.net
New techniques and tools for web race conditions
James Kettle's Black Hat and DEF CON talk introduces new web race condition classes beyond limit-overrun, plus the single-packet attack that sends parallel requests within 1ms, now in Burp Repeater.
Back