DOM Invader: Prototype Pollution

Published: 20 June 2022
on channel: PortSwigger

9,533

161

Last year we made it significantly easier to find DOM XSS, when we introduced a brand new tool called DOM Invader. This year, we've improved DOM Invader to make finding client-side prototype pollution as easy as a couple of clicks.

Find out more in the blog post: https://portswigger.net/blog/finding-...

Timestamps:
00:06 Client Side Prototype Pollution
02:55 Finding prototype pollution sources
05:04 Testing a prototype pollution source
06:33 Finding gadgets
09:26 Exploiting gadgets
10:06 Choosing where to inject prototype pollution
11:23 Choosing techniques
12:16 Scan each technique in a separate frame
13:38 Customising gadget scanning
14:42 General settings
16:26 Callbacks
18:39 General improvements

On this page of the site you can watch the video online DOM Invader: Prototype Pollution with a duration of hours minute second in good quality, which was uploaded by the user PortSwigger 20 June 2022, share the link with friends and acquaintances, this video has already been watched 9,533 times on youtube and it was liked by 161 viewers. Enjoy your viewing!

318