TokenToSeaSkill 广场
English 控制台

Prototype Pollution

yaklang

Prototype pollution testing for JavaScript stacks. Use when user input is merged into objects (query parsers, JSON bodies, deep assign), when configuring libraries via untrusted keys, or when hunting RCE gadgets via polluted Object.prototype in Node or the browser.

安装

尚未确认此技能的独立目录。下面命令会打开仓库技能选择器,请按上游说明选择技能。

skills CLI
npx skills add yaklang/hack-skills