Universal Prototype Pollution Gadgets in JavaScript Runtimes
☆10Oct 18, 2024Updated 2 years ago
Alternatives and similar repositories for ghunter
Users that are interested in ghunter are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Performant prototype pollution gadgets detection tool for Node.js applications.☆12Feb 16, 2024Updated 2 years ago
- ☆18Sep 4, 2023Updated 3 years ago
- A dynamic scripting language with a focus on flow-based syntax☆12Dec 10, 2025Updated 11 months ago
- Predict Math.random output in Node, Deno, Bun, Chrome, Firefox, and Safari☆12Updated this week
- Official implementation of "AdInject: Real-World Black-Box Attacks on Web Agents via Advertising Delivery".☆13Aug 11, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A blind XXE injection callback handler. Uses HTTP and FTP to extract information. Originally written in Ruby by ONsec-Lab.☆11Mar 18, 2019Updated 7 years ago
- Authenticated Arbitrary File Read in pfSense 2.8.0 via Diagnostics Web Interface (CVE-2025-53392)☆13Jan 1, 2026Updated 10 months ago
- ☆11Jul 4, 2023Updated 3 years ago
- A collection of hardware Trojans (HTs) automatically generated by Large Language Models (GPT-4, Gemini-1.5-pro, and LLaMA3) targeting SRA…☆12Oct 8, 2025Updated last year
- Discovered Data and Source Code☆10May 5, 2025Updated last year
- Fuzzer for Amplification Vulnerabilities (USENIX '22, Krupp et al)☆17Aug 27, 2022Updated 4 years ago
- ☆10Mar 22, 2022Updated 4 years ago
- Implementation of QFuzz.☆17Dec 3, 2021Updated 4 years ago
- Data Analysis of the results of llmail-inject challenge☆12Jul 1, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Electro-XSS , a buggy desktop app developed with the Electron framework.☆13Feb 10, 2022Updated 4 years ago
- Source code for ACM CCS 2020 Paper PMForce: Systematically Analyzing postMessage Handlers at Scale☆18May 17, 2021Updated 5 years ago
- A Chrome extension that watches your HackerOne reports and alerts you when their status changes. Its main reason to exist is internal act…☆15Jul 3, 2026Updated 4 months ago
- ☆17Aug 19, 2024Updated 2 years ago
- FuncVul: An Effective Function Level Vulnerability Detection Model using LLM and Code Chunk☆20Jun 5, 2026Updated 5 months ago
- A modular markup language☆27May 28, 2023Updated 3 years ago
- One call. Any language. Zero friction.☆25Sep 8, 2025Updated last year
- Docker PoC for CVE-2022-22965 with Spring Boot version 2.6.5☆16Apr 3, 2022Updated 4 years ago
- New "Brash" Exploit Crashes Chromium Browsers Instantly with a Single Malicious URL☆12Oct 31, 2025Updated last year
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- ☆15Feb 11, 2023Updated 3 years ago
- XS-Leak Browser Test Suite☆88Oct 25, 2026Updated 2 weeks ago
- aurora-d☆21Apr 24, 2022Updated 4 years ago
- PatchFuzz: Fuzzing for JavaScript Engine Incomplete Security Patches☆24Dec 17, 2025Updated 10 months ago
- Viaplay for Kodi☆32May 21, 2023Updated 3 years ago
- [READ-ONLY] Subtree split of the TYPO3 Core Extension "backend"☆19Updated this week
- A collection of ctf 'web-pwn' challenges, which require the exploitation of memory-related vulnerabilities within essential web component…☆17Oct 2, 2024Updated 2 years ago
- A toolkit for testing and benchmarking WPI techniques☆23Sep 2, 2026Updated 2 months ago
- A collection of Server-Side Prototype Pollution gadgets and exploits☆241Feb 6, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Artifacts of the paper "Arcanum: Detecting and Evaluating the Privacy Risks of Browser Extensions on Web Pages and Web Content" in USENIX…☆20Aug 9, 2024Updated 2 years ago
- ☆24Mar 17, 2023Updated 3 years ago
- Public results and products from DARPA AIxCC☆12Aug 11, 2025Updated last year
- Stratosphere uses password generation algorithms to discover publicly accessible cloud storage buckets.☆31Jul 15, 2021Updated 5 years ago
- ☆22Updated this week
- The official repository of ICSME'23 paper "Exploring Security Commits in Python"☆19Jul 12, 2023Updated 3 years ago
- CLI script to use GadgetProbe as a library to generate serialized payloads of DNS callbacks to free DNSbin to probe what Java classpaths …☆14Jun 8, 2021Updated 5 years ago
Are these results useful?