Cybersecurity
Prototype Pollution Exploit
JavaScript 原型链污染漏洞利用方法论。当目标为 Node.js 应用、使用 lodash/jQuery/深拷贝函数、接收 JSON 输入时使用。覆盖 Server-side(RCE/权限绕过)和 Client-side(XSS/DOM 操控)两种场景
- Publisher / source
- wgpsec/AboutSecurity (found on GitHub top repositories)
- Upstream record
- wgpsec/AboutSecurity
- Version
- Version 1
- Published
- Publication review
- Approved for publication
- Content fingerprint
611e5994366e572e249a34e8703cf14e614d19567fc796ec11a1986ed902efbe