Silent Spring: Prototype Pollution Leads to Remote Code Execution in Node.js
☆78Jan 21, 2024Updated 2 years ago
Alternatives and similar repositories for silent-spring
Users that are interested in silent-spring are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A collection of Server-Side Prototype Pollution gadgets and exploits☆241Feb 6, 2025Updated last year
- Performant prototype pollution gadgets detection tool for Node.js applications.☆12Feb 16, 2024Updated 2 years ago
- A collection of client-side libraries with HTML injection vulnerabilities and DOM clobbering gadgets.☆50Aug 31, 2025Updated last year
- linux ebpf backdoor demo☆11Nov 20, 2024Updated last year
- ODGen is a JavaScript Static Analysis tool to detect multiple types of vulnerabilities in Node.js packages.☆170Jan 29, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- PoC☆12Apr 7, 2025Updated last year
- TC39 proposal for mitigating prototype pollution☆54Aug 29, 2023Updated 3 years ago
- TheThing: an open-source tool to detect DOM Clobbering vulnerabilities☆57Oct 25, 2023Updated 3 years ago
- Universal Prototype Pollution Gadgets in JavaScript Runtimes☆10Oct 18, 2024Updated 2 years ago
- DNS Tunneling as net.Conn☆15Dec 22, 2024Updated last year
- ObjLupAnsys is a tool to detect prototype pollution vulnerabilities in Node.js packages. This project is written in Python and JavaScript…☆25Nov 30, 2021Updated 4 years ago
- ☆22Nov 3, 2022Updated 4 years ago
- ☆46Aug 20, 2026Updated 2 months ago
- pwn envs based on docker of ubuntu16.04,18.04,20.04☆10Dec 4, 2022Updated 3 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ☆17May 26, 2026Updated 5 months ago
- kill AV/EDR☆17Jun 9, 2023Updated 3 years ago
- MIT IEEE URTC 2025. GSET 2025. Repository for "TaintMonkey: Dynamic Taint Analysis of Python Web Applications Using Monkey Patching". A P…☆16Sep 13, 2026Updated last month
- ☆46Jan 2, 2022Updated 4 years ago
- JAW: A Graph-based Security Analysis Framework for Client-side JavaScript☆121Feb 13, 2026Updated 8 months ago
- ☆24May 11, 2024Updated 2 years ago
- Prototype Pollution and useful Script Gadgets☆1,660Jan 27, 2024Updated 2 years ago
- Challenges I wrote for various CTF competitions☆45Jul 21, 2024Updated 2 years ago
- Argument Injection in Dragonfly Ruby Gem☆16May 26, 2021Updated 5 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Shellcode execution via x86 inline assembly based on MSVC syntax☆16Apr 26, 2023Updated 3 years ago
- ☆16May 29, 2018Updated 8 years ago
- Exploit for CVE-2024-0402 in Gitlab☆15Mar 18, 2025Updated last year
- Pentest Q&A trick written in Vietnamese☆11May 16, 2019Updated 7 years ago
- 🗂 Knowledge Base on the Security of Chromium Extensions (https://extensions.neplox.security)☆21Jan 24, 2025Updated last year
- A collection of ctf 'web-pwn' challenges, which require the exploitation of memory-related vulnerabilities within essential web component…☆17Oct 2, 2024Updated 2 years ago
- A Solver-Generator for CFL-R problems☆11Jul 7, 2017Updated 9 years ago
- A BOF/COFF loader implemented in Go and CGO.☆23Jan 16, 2024Updated 2 years ago
- A variant analysis and visualisation tool that scans codebases for similar vulnerabilities☆76May 24, 2022Updated 4 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- GitHub Entreprise Server SAML authentication bypass (CVE-2025-23369) exploit☆38Feb 8, 2025Updated last year
- Some ReadObject Sink With JDBC☆243May 8, 2024Updated 2 years ago
- Performant taint analysis for Node.js☆58Aug 7, 2024Updated 2 years ago
- ☆29Aug 30, 2022Updated 4 years ago
- Generates a `php://filter` chain that adds a prefix and a suffix to the contents of a file.☆247Oct 8, 2024Updated 2 years ago
- ☆66Apr 24, 2023Updated 3 years ago
- ☆14Sep 11, 2019Updated 7 years ago