Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings

edoardottt/pphack

Repository files navigation

pphack

The Most Advanced Client-Side Prototype Pollution Scanner

Coded with πŸ’™ by edoardottt

go action go report card
Share on Twitter!

Install β€’ Get Started β€’ Examples β€’ Changelog β€’ Contributing β€’ License

Install πŸ“‘

Using Go

go install github.com/edoardottt/pphack/cmd/pphack@latest

pphack relies on chromedp, so you need Chrome or Chromium-based browser.

Get Started πŸŽ‰

Usage:
 pphack [flags]
Flags:
INPUT:
 -u, -url string Input URL
 -l, -list string File containing input URLs
CONFIGURATION:
 -c, -concurrency int Concurrency level (default 50)
 -t, -timeout int Connection timeout in seconds (default 20)
 -px, -proxy string Set a proxy server (URL)
 -rl, -rate-limit int Set a rate limit (per second)
 -ua, -user-agent string Set a custom User Agent (random by default)
 -H, -headers string[] Set custom headers
 -Hf, -headers-file string File containing custom headers
SCAN:
 -p, -payload string Custom payload
 -js, -javascript string Run custom Javascript on target
 -jsf, -javascript-file string File containing custom Javascript to run on target
 -e, -exploit Automatic Exploitation
OUTPUT:
 -o, -output string File to write output results
 -v, -verbose Verbose output
 -s, -silent Silent output. Print only results
 -j, -json JSON output

Examples πŸ’‘

Scan a single URL

pphack -u https://edoardottt.github.io/pphack-test/
echo https://edoardottt.github.io/pphack-test/ | pphack

Scan a list of URLs

pphack -l targets.txt
cat targets.txt | pphack

Automatic exploitation

pphack -e -u https://edoardottt.github.io/pphack-test/

Read the Wiki to understand how to use pphack.

Changelog πŸ“Œ

Detailed changes for each release are documented in the release notes.

Contributing πŸ› 

Just open an issue / pull request.

Before opening a pull request, download golangci-lint and run

golangci-lint run

If there aren't errors, go ahead :)

In the news πŸ“°

License πŸ“

This repository is under MIT License.
edoardottt.com to contact me.

Contributors 2

AltStyle γ«γ‚ˆγ£γ¦ε€‰ζ›γ•γ‚ŒγŸγƒšγƒΌγ‚Έ (->γ‚ͺγƒͺγ‚ΈγƒŠγƒ«) /