Collected research
Finding client-side prototype pollution with DOM Invader
Introduces DOM Invader support for finding client-side prototype pollution sources and exploitable gadgets in Burp Suite 2022.6. It scans query, fragment and message inputs, traces polluted values into dangerous sinks, and supports custom source and sink callbacks.
Record
- Researcher
- Gareth Heyes
- Published by
- PortSwigger
- Date
- Topic
- Injection
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Gareth Heyes, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .