Skip to content

Commit

Permalink
Update README.md
Browse files Browse the repository at this point in the history
  • Loading branch information
kleiton0x00 authored Jul 15, 2021
1 parent f20f612 commit fa460d3
Showing 1 changed file with 9 additions and 4 deletions.
13 changes: 9 additions & 4 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,8 @@ Make sure to have [chromedp](https://github.com/chromedp/chromedp) installed:

## Installation
- Automatically
- Download the already compiled binary [here](https://github.com/kleiton0x00/ppmap/releases/tag/v1.0.1)
- Download the already compiled binary [here](https://github.com/kleiton0x00/ppmap/releases)
- Give it the permission to execute ```chmod +x ppmap```

- Manually (compile it yourself)
- Clone the project:
Expand All @@ -19,8 +20,8 @@ Make sure to have [chromedp](https://github.com/chromedp/chromedp) installed:

## Usage

Using the program is very simple you can either:
- scan a directory/file:
Using the program is very simple, you can either:
- scan a directory/file (or even just the website):
```echo 'https://target.com/index.html' | ./ppmap```

- or endpoint:
Expand All @@ -32,7 +33,11 @@ For mass scanning:
## Demo
![](https://i.imgur.com/05nvfwX.gif)

## Features
Feel free to test the tool on the following websites as a part of demonstration:
https://msrkp.github.io/pp/2.html
https://ctf.nikitastupin.com/pp/known.html

## Workflow

- Identify if the website is vulnerable to Prototype Pollution by heuristic scan
- Fingerprint the known gadgets (checks for specific variables in the global context)
Expand Down

0 comments on commit fa460d3

Please sign in to comment.