pphack

Advanced client-side prototype pollution scanner for web applications.

Desktopfreeglobal

pphack is an advanced client-side prototype pollution scanner that drives a real Chrome/Chromium browser via chromedp to test a single URL or a list of URLs, with optional automatic exploitation once a vulnerability is confirmed. It's for penetration testers and bug bounty hunters who want automated detection of a vulnerability class that's otherwise hard to catch through manual browser inspection.

Website

Full match profile

Behind the summary, Matchbox keeps a richer profile of pphack - the signals our matcher actually reads to decide when to surface it. It stays private; claim the listing to see and control it.

Problem & pain-point mapping
Who we surface it to (audience fit)
What it's a strong alternative to
Trust & credibility signals

Claim pphack to unlock →

Try Matchbox with your own problem

Describe what is not working - we’ll show you whether pphack (or something else) actually fits.

Try a problem