Collected research
Server-side prototype pollution: Black-box detection without the DoS
Server-side prototype pollution in Node and Express can be found black box without the usual denial of service, by polluting properties that cause safe, reversible response changes such as JSON spacing, CORS exposed headers, status codes and OPTIONS output, plus an out-of-band payload setting NODE_OPTIONS --inspect that both confirms pollution and leads to remote code execution.
Record
- Researcher
- Gareth Heyes
- Published by
- PortSwigger Research
- Date
- Topic
- Injection
In the archive
Related sources
- Presentation slides Whitepaper
- Research extension
- Practice labs
- Nullcon Berlin 2023 | Server Side Prototype Pollution: Blackbox Detection Without The DoS by Gareth
Tags
This page is the archive's own catalogue record. The research is the work of Gareth Heyes, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .