Client Side Protype pollution Scanner

1. Clone the repo
2. Install addon
   • In chrome,
   • Go to More Tools -> Extenstions
   • Enable Developer Mode
   • Click on "Load unpacked" and select the cloned repo folder.
3. Visit the websites you want to test

It only checks for vulnerable location parsers.

1. https://msrkp.github.io/pp/1.html
2. https://msrkp.github.io/pp/2.html

Window mode is useful when the application uses frame busting.

https://msrkp.github.io/pp/3.html

If, you see XFO or CSP errors reload the extension. Extension tested on chrome version 86.

Check for the gadgets here https://github.com/BlackFan/client-side-prototype-pollution