domains / families / security / prototype-pollution-advanced

prototype-pollution-advanced

separate

Advanced prototype pollution playbook — server-side RCE, client-side gadgets, filter bypasses, and detection techniques. Companion to ../prototype-pollution/ for basics. Use when you've confirmed pollution and need to escalate to code execution or find framework-specific gadgets.

When to use

• server-side RCE via template engines
• Node.js child_process gadgets
• client-side script gadgets
• filter bypass patterns
• systematic detection
• framework-specific gadget exploitation

When not to use

• prototype pollution fundamentals
• merge-sink detection
• basic probes

Skill page

Source