Injection
Prototype Pollution
JavaScript's prototype chain is its superpower — and its biggest footgun. Pollute Object.prototype and every object in the application inherits your injected properties. From admin bypass to RCE via child_process.
Intermediate45 min7 lessons2 hands-on
First lesson free. The full module is part of Pro.
You'll be able to
- ✓Explain the JavaScript prototype chain and how __proto__ modifies it
- ✓Identify client-side prototype pollution via URL parameters and merge utilities
- ✓Demonstrate server-side prototype pollution leading to isAdmin bypass
- ✓Understand how prototype pollution chains into RCE via execPath poisoning
- ✓Freeze Object.prototype and use Object.create(null) to prevent pollution