Cybersecurity

Prototype Pollution Exploit

JavaScript 原型链污染漏洞利用方法论。当目标为 Node.js 应用、使用 lodash/jQuery/深拷贝函数、接收 JSON 输入时使用。覆盖 Server-side(RCE/权限绕过)和 Client-side(XSS/DOM 操控)两种场景

Publisher / source
wgpsec/AboutSecurity (found on GitHub top repositories)
Upstream record
wgpsec/AboutSecurity
Version
Version 1
Published
Publication review
Approved for publication
Content fingerprint
611e5994366e572e249a34e8703cf14e614d19567fc796ec11a1986ed902efbe