Web Security Academy Solutions

⌘Ctrlk

Prototype Pollution

Lab: DOM XSS via client side prototype pollution Lab: DOM XSS via an alternative prototype pollution vector Lab: Client side prototype pollution via flawed sanitization Lab: Client side prototype pollution in third party libraries Lab: Client side prototype pollution via browser APIs Lab: Privilege escalation via server side prototype pollution Lab: Detecting server side prototype pollution without polluted property reflection Lab: Bypassing flawed input filters for server side prototype pollution Lab: Remote code execution via server side prototype pollution Lab: Exfiltrating sensitive data via server side prototype pollution

PreviousLab: Performing CSRF exploits over GraphQL NextLab: DOM XSS via client side prototype pollution