Performant prototype pollution gadgets detection tool for Node.js applications.
☆12Feb 16, 2024Updated 2 years ago
Alternatives and similar repositories for Dasty
Users that are interested in Dasty are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Universal Prototype Pollution Gadgets in JavaScript Runtimes☆10Oct 18, 2024Updated 2 years ago
- Source code for ACM CCS 2020 Paper PMForce: Systematically Analyzing postMessage Handlers at Scale☆18May 17, 2021Updated 5 years ago
- Performant taint analysis for Node.js☆58Aug 7, 2024Updated 2 years ago
- TaintFlow, a framework for JavaScript dynamic information flow analysis.☆17Jan 18, 2023Updated 3 years ago
- Artifacts of the paper "Arcanum: Detecting and Evaluating the Privacy Risks of Browser Extensions on Web Pages and Web Content" in USENIX…☆20Aug 9, 2024Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Silent Spring: Prototype Pollution Leads to Remote Code Execution in Node.js☆78Jan 21, 2024Updated 2 years ago
- Instrumentation framework for Node.js compliant to ECMAScript 2020 based on GraalVM.☆61Jan 18, 2025Updated last year
- JAW: A Graph-based Security Analysis Framework for Client-side JavaScript☆121Feb 13, 2026Updated 9 months ago
- ☆47Aug 20, 2026Updated 2 months ago
- YuraScanner☆89Feb 13, 2025Updated last year
- Official implementation of "AdInject: Real-World Black-Box Attacks on Web Agents via Advertising Delivery".☆13Aug 11, 2025Updated last year
- Discovered Data and Source Code☆10May 5, 2025Updated last year
- Code for our 2024 IEEE S&P Paper "To Auth or Not To Auth? A Comparative Analysis of the Pre- and Post-Login Security Landscape"☆13Jul 16, 2026Updated 3 months ago
- ☆13Oct 30, 2024Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Authenticated Arbitrary File Read in pfSense 2.8.0 via Diagnostics Web Interface (CVE-2025-53392)☆13Jan 1, 2026Updated 10 months ago
- Security Test Benchmark for Computer Architectures☆20Updated this week
- ☆11Jul 4, 2023Updated 3 years ago
- OCaml bindings to GObject-Introspection based on OCaml-Ctypes.☆17Mar 31, 2022Updated 4 years ago
- A collection of hardware Trojans (HTs) automatically generated by Large Language Models (GPT-4, Gemini-1.5-pro, and LLaMA3) targeting SRA…☆12Oct 8, 2025Updated last year
- Fuzzer for Amplification Vulnerabilities (USENIX '22, Krupp et al)☆17Aug 27, 2022Updated 4 years ago
- Implementation of QFuzz.☆17Dec 3, 2021Updated 4 years ago
- Data Analysis of the results of llmail-inject challenge☆12Jul 1, 2025Updated last year
- ODGen is a JavaScript Static Analysis tool to detect multiple types of vulnerabilities in Node.js packages.☆170Jan 29, 2024Updated 2 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- OCaml implementation of the KDL Document Language☆18Sep 28, 2026Updated last month
- Towards Machine-Checked Analysis of Browser Security Mechanisms☆14Jun 17, 2024Updated 2 years ago
- PHP Emulator☆13Dec 18, 2016Updated 9 years ago
- An `<install>` element might be nice.☆21Oct 20, 2026Updated 3 weeks ago
- JSFlow is a security-enhanced JavaScript interpreter for fine-grained tracking of information flow.☆15May 28, 2021Updated 5 years ago
- A Chrome extension that watches your HackerOne reports and alerts you when their status changes. Its main reason to exist is internal act…☆15Jul 3, 2026Updated 4 months ago
- FuncVul: An Effective Function Level Vulnerability Detection Model using LLM and Code Chunk☆20Jun 5, 2026Updated 5 months ago
- ObjLupAnsys is a tool to detect prototype pollution vulnerabilities in Node.js packages. This project is written in Python and JavaScript…☆25Nov 30, 2021Updated 4 years ago
- CRash Scope (CRScope) is a ML-guided crash classifier of a given JavaScript engine crash-dump file.☆13Aug 28, 2019Updated 7 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- JaVerT2.0 - Compositional Symbolic Execution for JavaScript☆20Apr 22, 2020Updated 6 years ago
- New "Brash" Exploit Crashes Chromium Browsers Instantly with a Single Malicious URL☆12Oct 31, 2025Updated last year
- ☆18Sep 4, 2023Updated 3 years ago
- A collection of Server-Side Prototype Pollution gadgets and exploits☆241Feb 6, 2025Updated last year
- ☆19Feb 1, 2016Updated 10 years ago
- A constraint solver abstraction layer for Java☆22Apr 16, 2023Updated 3 years ago
- ☆15Mar 19, 2022Updated 4 years ago
Are these results useful?