Skip to content
OpenTrain AIFor AI Companies

GHunter: Universal Prototype Pollution Gadgets in JavaScript Runtimes

Published Jul 1, 2024
arXiv PDF
Researcher verdict
Starting point
Use as implementation starting point
Benchmark evidence
Missing
Not verified yet
Time to first repro
A few days
Plan setup time
Risk flags
2
Review before use

Results and benchmarks

Freshness tier: cold
GHunter: Universal Prototype Pollution Gadgets in JavaScript Runtimes is the primary contribution described in this paper.

Implementation

Best maintained implementation now

Recommended
Confidence: High
Reproducibility: Limited
kth-langsec/server-side-prototype-pollution

A collection of Server-Side Prototype Pollution gadgets and exploits

237 stars · 20 forks · Last push Feb 6, 2025 · MIT license

  • License
  • CI
  • Dependencies
  • Docker

Official implementation from Papers with Code · Repository link is mentioned in the paper metadata · Strong overlap with paper title keywords

Why this implementation
Confidence: high

kth-langsec/server-side-prototype-pollution is the strongest maintained implementation based on ranking signals. License is declared (MIT).

Open kth-langsec/server-side-prototype-pollution
Reproduction risks
  • No CI workflows detected
  • Dependency manifest is missing
  • Selected kth-langsec/server-side-prototype-pollution as the strongest maintained implementation for new work.
  • Repository activity is within the last 24 months.
  • Official repository is preserved separately as historical context.

Compare implementation paths

Compare maintenance quality, reproducibility coverage, and evidence confidence before choosing a reproduction baseline.

kth-langsec/server-side-prototype-pollution
best maintained
Maintenance
Stale
Confidence
High
Reproducibility
Limited
Stars
237
Last push
Feb 6, 2025 (565d)

Official implementation from Papers with Code · Repository link is mentioned in the paper metadata

  • No push in 12+ months
  • No CI pipeline detected
  • No tagged releases
kth-langsec/ghunter
historical official
Maintenance
Stale
Confidence
High
Reproducibility
Limited
Stars
9
Last push
Oct 18, 2024 (676d)

Official implementation from Papers with Code · Repository link is mentioned in the paper metadata

  • No push in 12+ months
  • No CI pipeline detected
  • No tagged releases

Reproduction readiness

Time to first repro: days
Last checked: Aug 23, 2026

Major work

No dependency manifest, manual reconstruction required

  • kth-langsec/server-side-prototype-pollution has no requirements.txt, environment.yml, pyproject.toml, or Dockerfile.
  • You will need to reverse-engineer dependencies from import statements in the source code.
  • Last push was 565 days ago.
Open kth-langsec/server-side-prototype-pollution

Hardware requirements

  • Expect multi-day setup/compute for meaningful reproduction based on current guidance.

Hugging Face artifacts

No direct paper-linked artifacts were found. Showing strongest curated related artifacts for faster exploration.

Models

Curated Related

Broaden model search

ghunter universal prototype pollution

Datasets

No trustworthy datasets matches right now.

Search datasets on Hugging Face

Spaces

No trustworthy spaces matches right now.

Search spaces on Hugging Face

Research context

Evaluation and human feedback data

Open this paper in HFEPX to review benchmark signals, evaluation modes, and human-feedback protocol context.

Open in HFEPX

Data includes links from Papers with Code ( CC-BY-SA-4.0 ).