-
Notifications
You must be signed in to change notification settings - Fork 0
Prototype pollution
Alnoman Kamil edited this page Nov 23, 2024
·
2 revisions
Expert lab:
Exfiltrating sensitive data via server-side prototype pollution (Pro)
Expert lab:
Exfiltrating sensitive data via server-side prototype pollution (Pro)
Solutions for the Portswigger's Web Security Academy using mitmproxy and other cli tools instead of Burp Suite
Server-side topics:
- SQL injection
- Authentication
- File path traversal
- OS command injection
- Business logic vulnerabilities
- Information disclosure
- Access control vulnerabilities
- File upload vulnerabilities
- Race conditions
- Server-side request forgery (SSRF)
- XML external entity (XXE) injection
- NoSQL injection
- API testing
- Web cache deception
Client-side topics:
- Cross-site scripting (XSS)
- Cross-site request forgery (CSRF)
- Cross-origin resource sharing (CORS)
- Clickjacking
- DOM-based vulnerabilities
- WebSockets
Advanced topics: