Skip to content
Server-side prototype pollution: Black-box detection without the DoS
portswigger.net | research | #web-security | #prototype-pollution | #detection | #nodejs | #black-box-testing | #burp-suite-extension
Summary
Safe black-box detection methods for server-side prototype pollution that avoid breaking the server: encoding tricks, JSON spaces, exposed headers and other signals, shipped as a Burp extension.
- Published
- Collected