ppfuzz v1.0.2 releases: scan prototype pollution vulnerability

by do son · Published July 7, 2021 · Updated December 2, 2022

A fast tool to scan prototype pollution vulnerability written in Rust.

Here are all the options it supports:

Flag	Description	Default value
-l, –list	List of target URLs
-c, –concurrency	Set the concurrency level	5
-t, –timeout	Max. time allowed for connection (s)	30
-h, –help	Prints help information
-V, –version	Prints version information

Use -l/–list to provide input list:

▶ ppfuzz -l FILE

You can also provide the list using I/O redirection:

▶ ppfuzz < FILE

— or chain it from another command output:

▶ cat FILE | ppfuzz

Only show vulnerable targets/suppress an error:

▶ ppfuzz -l FILE 2>/dev/null