Finding client-side prototype pollution with DOM Invader

Published

2022-06-20 12:37

Collected

2026-07-01 11:03

---
id: 305
title: "Finding client-side prototype pollution with DOM Invader"
source_domain: portswigger.net
source_url: "https://portswigger.net/blog/finding-client-side-prototype-pollution-with-dom-invader"
published_at: "2022-06-20 12:37"
tags: ["burp-suite", "xss", "client-side-security", "prototype-pollution", "dom-invader", "dom-xss"]
phying_url: "https://phying.com/item/305"
lang: en
---

# Finding client-side prototype pollution with DOM Invader

## Summary

DOM Invader has been upgraded to detect client-side prototype pollution (CSPP) in a couple of clicks. The post explains pollution sources, gadgets, and how the tool finds and exploits them.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2022-06-20 12:37
- **Original:** https://portswigger.net/blog/finding-client-side-prototype-pollution-with-dom-invader
- **Phying News:** https://phying.com/item/305