---
id: 292
title: "Server-Side Prototype Pollution Scanner"
source_domain: portswigger.net
source_url: "https://portswigger.net/blog/server-side-prototype-pollution-scanner"
published_at: "2023-03-13 15:00"
tags: ["prototype-pollution", "web-security-academy", "portswigger-research", "scanning", "burp-extension"]
phying_url: "https://phying.com/item/292"
lang: en
---

# Server-Side Prototype Pollution Scanner

## Summary

PortSwigger's server-side prototype pollution detection techniques are now built into an open source Burp extension, demonstrated by exploiting a Web Security Academy privilege escalation lab.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2023-03-13 15:00
- **Original:** https://portswigger.net/blog/server-side-prototype-pollution-scanner
- **Phying News:** https://phying.com/item/292