Skip to content

pavelsaman/check-prototype-pollution

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

5 Commits
 
 
 
 
 
 
 
 

Repository files navigation

Check prototype pollution in JS libraries

Usage

  1. install JS libraries you want to test:
$ npm init -y
$ npm install json5 lodash
  1. run ./find-pollution.sh with those libraries as arguments:
$ ./find-pollution.sh [library_name...]

Notes

Based on prototype-pollution-nsec18 repo.

This check is not 100 % correct, but it's a good enough heuristic.