Client-side Prototype pollution

DOM Invader

Burp's DOM Invader can be used for automatic detection / exploitation. Included with Burp suite's (Chromium) web browser.