Prototype Pollution Gadgets Finder

The Prototype Pollution Gadgets Finder is a powerful Burp Suite extension designed to detect and analyze server-side prototype pollution vulnerabilities in web applications. This tool automates the process of scanning requests to identify potential prototype pollution issues. It exploits known gadgets - methods of leveraging prototype pollution to execute harmful actions - particularly focusing on Node.js libraries.

Features

• Automated scanning of HTTP requests for prototype pollution vulnerabilities.
• Detection and exploitation of known gadgets in Node.js libraries.
• Direct exploitation approach to assess the impact of prototype pollution in server-side environments.

How to use

1. Right-click on any HTTP request and select "Extensions -> Prototype Pollution Gadgets Finder -> Scan Gadgets"
2. The extension will analyze the request and attempt to poison the prototype if the application is vulnerable.
3. Review the results to identify potential gadgets and their impacts.