The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Prototype pollution : how to find gadgets when DOM invader can't find the source itself ?

sssss | Last updated: Jun 14, 2024 12:41PM UTC

Correct me if I'm wrong, but I think that DOM invader can't find a source as soon as the web application sanitizes the user-controllable properties by stripping any __proto__ from the key used to make a new property. If so, it may be easy to find the source manually (for example by entering /?__pro__proto__to__[foo]=bar when the WebApp does not recursively sanitize). Still, finding the gadgets may be tedious after that. Is there a way to indicate this source to DOM invader so that it is able to find the gadgets itself ?

Josh, PortSwigger Agent | Last updated: Jun 17, 2024 09:56AM UTC

Hi, we'll check up on this and get back to you soon. Thanks for your patience!

Hannah, PortSwigger Agent | Last updated: Jun 18, 2024 02:54PM UTC