domains / families / security / exploiting-prototype-pollution-in-javascript

exploiting-prototype-pollution-in-javascript

separate

Detects and exploits JavaScript prototype pollution vulnerabilities

When to use

• When testing Node.js or JavaScript-heavy web applications
• During assessment of APIs accepting deep-merged JSON objects
• When testing client-side JavaScript frameworks for DOM XSS via prototype pollution
• During code review of object merge/clone/extend operations
• When evaluating npm packages for prototype pollution gadgets

Skill page

Source