Feb 22, 2021 01:24 AM
(This post was last modified: Feb 22, 2021 01:25 AM by doomerAndy.)
Hi there. I'm trying to hack into a machine and I have found a way in, but I need a prototype pollution vulnerability to make it happen and there is no crappy merge in there :/
Is there any way I can pollute a new property into Object.prototype just by a new variable assignment? Somewhere like this:
let newVar = JSON.parse(getJSONResponse(url))
Where we can assume that getJSONResponse() will always return a JSON object and we have full control of the url. Recall that neither functions nor expressions are parsed into a new object by JSON.parse().
Thanks so much
Is there any way I can pollute a new property into Object.prototype just by a new variable assignment? Somewhere like this:
let newVar = JSON.parse(getJSONResponse(url))
Where we can assume that getJSONResponse() will always return a JSON object and we have full control of the url. Recall that neither functions nor expressions are parsed into a new object by JSON.parse().
Thanks so much