Repositories list

• ProtoDasty

  Public
  Tool based on Dasty and NodeProf to detect prototype pollution vulnerabilities in NPM packages.

  JavaScript

  •

  MIT License

  •0•1•0•0•Updated Feb 18, 2026Feb 18, 2026

• shiftleft.proj.kth.se

  Public
  The source for the website of the ShiftLeft project

  0•2•0•0•Updated Jan 30, 2026Jan 30, 2026

• classa

  Public

  KTH-LangSec/classa’s past year of commit activity
  Classa: Uncovering Class Pollution in Python -- Measuring Class Pollution Vulnerabilities of 3000 Real-World Python Projects

  Rust

  •

  GNU General Public License v3.0

  •0•1•0•0•Updated Jan 9, 2026Jan 9, 2026

• nodeshield

  Public
  Runtime Enforcement of Security-Enhanced SBOMs for Node.js

  web-securityweb-application-securitysbom+ 1supply-chain-security

  JavaScript

  •

  BSD-2-Clause Plus Patent License

  •0•8•0•0•Updated Sep 1, 2025Sep 1, 2025

• jpf-dyncover

  Public
  DynCoVer

  Java

  •

  GNU General Public License v3.0

  •0•2•0•0•Updated May 15, 2025May 15, 2025

• TAPShield

  Public
  A framework to secure Trigger-Action Platforms (TAPs)

  javascripttapiot+ 2sandboxingconfidential-computing

  Python

  •0•0•0•0•Updated Mar 18, 2025Mar 18, 2025

• server-side-prototype-pollution

  Public
  A collection of Server-Side Prototype Pollution gadgets and exploits

  javascriptsecuritytypescript+ 4exploitsvulnerabilitiesgadgetsprototype-pollution

  JavaScript

  •

  MIT License

  •20•223•1•0•Updated Feb 6, 2025Feb 6, 2025

• ghunter4deno

  Public
  Universal Prototype Pollution Gadgets in the Deno Runtime

  TypeScript

  •

  MIT License

  •1•1•0•1•Updated Jan 21, 2025Jan 21, 2025

• ghunter

  Public
  Universal Prototype Pollution Gadgets in JavaScript Runtimes

  0•8•1•0•Updated Oct 18, 2024Oct 18, 2024

• silentspring4ghunter

  Public
  Fork of SilentSpring used in the evaluation of GHunter

  JavaScript

  •

  MIT License

  •11•0•0•0•Updated Oct 17, 2024Oct 17, 2024

• TAP4S

  Public
  TAP4S (Type-based Analysis for P4 Security)

  Python

  •

  GNU General Public License v3.0

  •0•1•0•0•Updated Sep 26, 2024Sep 26, 2024

• ghunter4node

  Public
  Universal Prototype Pollution Gadgets in the Node.js Runtime

  JavaScript

  •

  MIT License

  •0•4•1•0•Updated Aug 26, 2024Aug 26, 2024

• Dasty

  Public
  Performant prototype pollution gadgets detection tool for Node.js applications.

  JavaScript

  •

  MIT License

  •1•12•0•0•Updated Feb 16, 2024Feb 16, 2024

• TroupeLang

  Public
  Troupe programming language

  TypeScript

  •16•0•0•0•Updated Feb 15, 2024Feb 15, 2024

• silent-spring

  Public
  Silent Spring: Prototype Pollution Leads to Remote Code Execution in Node.js

  JavaScript

  •

  MIT License

  •11•75•0•0•Updated Jan 21, 2024Jan 21, 2024

• nodeprof.js

  Public
  Instrumentation framework for Node.js compliant to ECMAScript 2020 based on GraalVM.

  Java

  •

  Apache License 2.0

  •24•4•0•0•Updated Nov 6, 2023Nov 6, 2023

• DiVerT

  Public
  DiVerT (Disjunctive Verification with Types)

  Python

  •

  GNU General Public License v3.0

  •0•0•0•0•Updated Oct 3, 2023Oct 3, 2023

• npm-dependency-guardian

  Public archive
  A containerized fork of npm-dependency-guardian

  JavaScript

  •

  MIT License

  •1•0•0•0•Updated May 31, 2023May 31, 2023

• Troupe-user-guide

  Public
  Troupe user guide

  TeX

  •2•0•0•0•Updated Apr 6, 2022Apr 6, 2022

• SerialDetector

  Public
  A proof-of-concept tool for detection and exploitation Object Injection Vulnerabilities in .NET applications

  C#

  •6•63•2•0•Updated Jan 29, 2021Jan 29, 2021