← Back to Courses/Web Pentest
IntermediateFREE17 hours

How Do Prototype Pollution Vulnerabilities Arise?

// VULNERABLE: Recursive merge without key sanitization (prototype pollution)

Enroll for free to track your progress through this course.

Curriculum (34 lessons)

  1. 1. How Do Prototype Pollution Vulnerabilities Arise?
  2. 2. Prototype Pollution Sources a Prototype Pollution Source Is Any User-Controllable Input Th
  3. 3. Prototype Pollution Sinks a Prototype Pollution Sink Is Essentially Just a JavaScript Func
  4. 4. Prototype Pollution Gadgets a Gadget Provides a Means of Turning the Prototype Pollution V
  5. 5. JavaScript Prototypes and Inheritance
  6. 6. What Is an Object in
  7. 7. What Is a Prototype in
  8. 8. How Does Object Inheritance Work in
  9. 9. the Prototype Chain
  10. 10. Accessing an Object'S Prototype Using __proto__ Every Object Has a Special Property That Y
  11. 11. Modifying Prototypes
  12. 12. Client-Side Prototype Pollution Vulnerabilities
  13. 13. Finding Client-Side Prototype Pollution Sources Manually
  14. 14. Finding Client-Side Prototype Pollution Sources Using DOM
  15. 15. Finding Client-Side Prototype Pollution Gadgets Manually
  16. 16. Finding Client-Side Prototype Pollution Gadgets Using DOM
  17. 17. Prototype Pollution via the Constructor
  18. 18. Bypassing Flawed Key Sanitization
  19. 19. Prototype Pollution in External Libraries
  20. 20. Server-Side Prototype Pollution
  21. 21. Independent Security Research
  22. 22. Why Is Server-Side Prototype Pollution More Difficult to Detect?
  23. 23. Detecting Server-Side Prototype Pollution via Polluted Property Reflection an Easy Trap fo
  24. 24. Detecting Server-Side Prototype Pollution Without Polluted Property Reflection Most of the
  25. 25. Scanning for Server-Side Prototype Pollution Sources
  26. 26. Bypassing Input Filters for Server-Side Prototype Pollution
  27. 27. Remote Code Execution via Server-Side Prototype Pollution
  28. 28. Preventing Prototype Pollution Vulnerabilities
  29. 29. Sanitizing Property Keys
  30. 30. Preventing Changes to Prototype Objects a More Robust Approach to Preventing Prototype Pol
  31. 31. Preventing an Object From Inheriting Properties
  32. 32. Using Safer Alternatives Where Possible
  33. 33. Best Practices & Detailed Takeaways
  34. 34. Basic Pollution

Course price

Free

  • 34 lessons
  • Lifetime access
  • 0 students enrolled
Sign In to Enroll