Automatic Prototype Pollution Exploitation

[edoardottt]

The desired behavior would be having a new flag -e (-exploit) in scan input. pphack then will try to produce a PoC URL for the exploit (e.g. XSS) based on the vulnerable technology.

Are we sure about chromedp alert box detection? maybe js detection is better...

• WAF checks?
• Check JSON output too.