I'm doing a CTF where a can upload a PAC file.
The nodejs server is processing this file and I can execute code injecting directly in the PAC function but I'm not able to break out of the sandbox.
I have also tried prototype pollution but I can't import new libraries.
I'm a bit lost.
Any help?
The nodejs server is processing this file and I can execute code injecting directly in the PAC function but I'm not able to break out of the sandbox.
I have also tried prototype pollution but I can't import new libraries.
I'm a bit lost.
Any help?