If I ever had to record a motivation video, this talk would be it 😅 Check it out and don't let "unexploitable" stop you! youtu.be/H-bhmSwnRdY

#defcon32 #bugbounty #rce #prototypepollution #nodejs #npm

🛠 Breaking out of isolated containers via RCE-by-design.
💥 Turning Prototype Pollution from "just a DoS" into full #RCE with new gadgets in #Nodejs and #NPM packages.
🧩 Combining an "unexploitable" highly-restricted #PrototypePollution with a fixed one to achieve RCE.

Google engineers plot to mitigate prototype pollution

https://cybersonar.org/go/JwChvU
Posted at 16:57

#PrototypePollution #JavaScriptSecurity #CodeOrganizationMatters

At its core, this is a prototype-pollution flaw—dangerous on its own—but in Elysia’s validation/merge logic, it becomes a stepping stone to full RCE under the server’s authority.
#PrototypePollution #WebSecurity #SupplyChainSecurity #BackendSecurity 🧵2/5

New write-up published: Prototype Pollution in Practice

Using three PortSwigger labs, I walk through a repeatable methodology.

Less about lab solutions, more about the process.

medium.com/@marduk.i.am...

#CyberSecurity #BugBounty #XSS #PrototypePollution

🚀 Enhanced our security scanner with prototype pollution detection! Now catches unsafe merge patterns and dynamic property access that could lead to security issues. #WebSecurity #JavaScript #PrototypePollution

### 2025-06-21
🚀 Just built a lightweight vulnerability scanner in...

あまり使われていない古いライブラリにprototypepollutionからのXSSを見つけたけど深掘りするの面倒なので見なかったことにしよう