Pinned Repositories
Dasty
Performant prototype pollution gadgets detection tool for Node.js applications.
ghunter
ghunter4node
jpf-dyncover
DynCoVer
nodeprof.js
Instrumentation framework for Node.js compliant to ECMAScript 2020 based on GraalVM.
SerialDetector
A proof-of-concept tool for detection and exploitation Object Injection Vulnerabilities in .NET applications
server-side-prototype-pollution
A collection of Server-Side Prototype Pollution gadgets and exploits
shiftleft.proj.kth.se
The source for the website of the ShiftLeft project
silent-spring
Silent Spring: Prototype Pollution Leads to Remote Code Execution in Node.js
silentspring4ghunter
Silent Spring: Prototype Pollution Leads to Remote Code Execution in Node.js
KTH-LangSec's Repositories
KTH-LangSec/server-side-prototype-pollution
A collection of Server-Side Prototype Pollution gadgets and exploits
KTH-LangSec/SerialDetector
A proof-of-concept tool for detection and exploitation Object Injection Vulnerabilities in .NET applications
KTH-LangSec/silent-spring
Silent Spring: Prototype Pollution Leads to Remote Code Execution in Node.js
KTH-LangSec/Dasty
Performant prototype pollution gadgets detection tool for Node.js applications.
KTH-LangSec/nodeprof.js
Instrumentation framework for Node.js compliant to ECMAScript 2020 based on GraalVM.
KTH-LangSec/jpf-dyncover
DynCoVer
KTH-LangSec/ghunter
KTH-LangSec/ghunter4node
KTH-LangSec/shiftleft.proj.kth.se
The source for the website of the ShiftLeft project
KTH-LangSec/silentspring4ghunter
Silent Spring: Prototype Pollution Leads to Remote Code Execution in Node.js
KTH-LangSec/DiVerT
DiVerT (Disjunctive Verification with Types)
KTH-LangSec/ghunter4deno
KTH-LangSec/Troupe-user-guide
Troupe user guide
KTH-LangSec/TroupeLang
Troupe programming language