Automatic Prototype Pollution Exploitation #200
Description
The desired behavior would be having a new flag -e (-exploit) in scan input.
pphack then will try to produce a PoC URL for the exploit (e.g. XSS) based on the vulnerable technology.
Are we sure about chromedp alert box detection? maybe js detection is better...
- WAF checks?
- Check JSON output too.