+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Pac-resolver and prototype polution (/showthread.php?tid=6260237)
Pac-resolver and prototype polution - jhonbosworth - Jan 5, 2024
I'm doing a CTF where a can upload a PAC file.
The nodejs server is processing this file and I can execute code injecting directly in the PAC function but I'm not able to break out of the sandbox.
I have also tried prototype pollution but I can't import new libraries.
I'm a bit lost.
Any help?